Modern Technology Solutions, Inc. (MTSI)

Security Engineer

• Lead and manage the process for enabling authority to operate (ATO) on commercial systems contracted under DIU-led or supported efforts
• Assemble and submit security authorization packages to the Authorizing Official, including the security plan, security assessment report, POA&M, and inherited-control documentation
• Support implementation of the Risk Management Framework (RMF)
• Maintain awareness of service-level changes to internal Authority to Operate processes to facilitate reciprocity across the department
• Identify organizational common security requirements and document them in the AO Determination Brief and continuous monitoring strategy
• Conduct initial remedial actions based on findings and reassess remediated risks
• Update the AO Determination Brief, SAR, and POA&M based on continuous monitoring results
• Report information-system security status and control effectiveness to the Authorizing Official and other appropriate officials
• Continuously monitor and maintain ATOs
• Travel to DIU or customer facilities as required

Information System Security Manager – ISSM