Principal Cybersecurity Engineer

Torch Technologies has an exciting opportunity for a Principal Cybersecurity Engineer providing support to the Command, Control, Communications, and Battle Management Division (C3BM).

We have an exciting opportunity for a Cybersecurity Principal to serve as an ISSA/ISSO Manager

Command, Control, Communications, and Battle Management (C3BM) has been tasked with delivering an integrated Department of the Air Force (DAF) Battle Network providing resilient decision advantage and enabling the USAF, USSF, Joint, and Coalition Force to win against the pacing challenge. C3BM supports execution in many different focus areas. C3BM's main efforts are Architecture and Systems Engineering (ASE), Operational Response Team (ORT), and multiple mission integration teams such as Air, Maritime and multiple acquisitions consisting of both the Advanced Battle Management System (ABMS) and Space.

The DAF BATTLE NETWORK is the integrated system-of-systems fusing sensors, effectors, and sustainment grids to build situational awareness, make operational decisions, and direct the force to create needed lethal and nonlethal effects in support of the Joint Force Commander's scheme of maneuver. The DAF PEO C3BM has the responsibility of technically and programmatically integrating the DAF's larger system-of-systems architecture needed to deliver an integrated Command and Control (C2) core function for the DAF, Joint, and Coalition forces, by teaming with all other DAF PEOs, as needed.

This is a full-time position located at Colorado Springs, CO (But there will also be availability to work out of Hanscom AFB, MA OR Langley AFB, VA)

Responsibilities

Duties include, but not limited to:

• Assist with development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, Computer Certification and Accreditation, Security Vulnerability and Countermeasures Analyses, Security Concepts of Operations, and other system security engineering-related documents identified in MIL-STD 1785, DoDI 5000.02, Operation of the Adaptive Acquisition Framework, and DoDI 8510.01
• Support the system/application Authorization and Accreditation (A&A) effort to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF)
• Update, monitor, and manage information in systems for the program office.
• Process and manage system user account requests and process tools.
• Process and manage system port/protocol and access control list requirements.
• Process and manage system Public Key Infrastructure (PKI) identification and authorization requirements.
• Manage the distribution, implementation, remediation, and tracking of system security updates and configurations as required by the DoD.
• Recommend policies and procedures to ensure information systems reliability and accessibility to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risk, and protection needs.
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations' vision and goals.
• Conduct systems security evaluations, audits, and reviews.
• Recommend systems security contingency plans and disaster recovery procedures.
• Recommend and implementing programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
• Participate in network and systems design to ensure implementation of appropriate systems security policies.
• Recommend initial, or updates to, software and configurations to new or existing system security mechanisms.
• Obtain waivers to mandated security mechanisms/policies which would be detrimental to system performance and impact the system's mission.
• Facilitate the gathering, analysis and preservation of evidence used in the prosecution of computer.
• Provide leadership assistance in the analysis of the design, development, integration, implementation and testing of cybersecurity requirements.
• Develop risk-based strategies to address identified gaps.
• Review, analyze, and assess implementations of cybersecurity (i.e. RMF security controls) throughout the open systems architecture and associated services, derived requirements specifications, design documents & design implementation
• Collaborate with stakeholders (Government and commercial) to ensure the system is approved by all Authorizing Officials via the RMF A&A process.
• Provide technical advice in systems security across all systems and supports.
• Develop recommendations for the Government regarding how well designs satisfy current requirements and business goals.
• Maintain databases that reflect receipt, storage, inventory, and disposition of classified information to include data entry, updates, and generation of reports.
• Support Government program office in audits of Government classified holdings to ensure proper accountability.
• Maintain databases of classified visits and clearance levels
• Perform inspection, inventory, logging, storage, documentation, transmittal, and internal distribution of classified information received.
• Evaluate Contractor classified data submittals for compliance with the appropriate System Security Classification Guide (SSCG)
• Provide security inspection and protection to areas where classified information is being stored, and develop and establish security procedures and policies IAW DOD, USAF, AFMC, and local directives.
• Develop training and provide security awareness and other security education programs.
• Review and verify personnel qualifications for access to special access programs.
• Develop, implement, and maintain a communications security program.
• Assess program disclosure issues and provide FMS case management support.
• Assist and advise FMS program office management and leadership in interfacing with FMS customers and all USG organizations, including but not limited to SAF/IA, Air Force Security Assistance Center (AFSAC), Air Force Security Assistance Training (AFSAT) squadron, Defense Finance and Accounting Services (DFAS)
• Support execution of all aspects of acquisition program security throughout a program's lifecycle
• Assist with development of sound security practices and policies regarding acquisition, physical, personnel and documentation security.
• Update security classification guides

Job Requirements

Minimum Required Qualifications:

Education: BS/BA Degree

Years' experience: 15 years of experience in the respective technical/professional discipline being performed, 10 of which must be in the DoD.

• Risk Management Framework (RMF), with emphasis on taking projects from Step 1 to Step 5
• Vulnerability Management, Tenable Nessus (ACAS-DoD version of Nessus)
• STIGs

Preferred Requirements:

• Experience with Cross Domain Solutions and USAF CDS-E
• Cloud Service Models
• Supply Chain Security
• NIAP
• DoD Policies for Procedures for Cybersecurity
• Network Security
• Endpoint
• DoD Impact Levels
• NSA Type 1 encryption
• Working with a CSSP - 16th AF

U.S. Citizenship Required for this Position: Yes

Job Type: Regular Full-time

Security Clearance: Top Secret

Schedule: 40 Hrs/week

Work Location: Colorado Springs, Also availability to work out of Hanscom AFB, MA or Langley AFB, VA

Travel: 0-10%

Relocation Assistance Available: No

Position Contingent Upon Award of Contract: No

Salary Range: $180K - $195K

Benefits:

Torch Technologies is proud to offer a stable and professional work environment, a competitive salary, and an excellent, comprehensive benefit package including: ESOP participation, 401(k) match and safe-harbor contribution, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, Health Saving Accounts and Health Reimbursement Accounts, EAP, education assistance, paid time off, and holidays.

Applying to Torch Technologies:

Only those candidates invited for an interview will be contacted. Employment at Torch Technologies is contingent upon the successful completion of a comprehensive background check.

Torch Technologies is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Employment Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability or any other protected class.

#LI-EW1

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access as a result of your disability. You can request reasonable accommodations by sending an email to Thank you for your interest in Torch Technologies.