ATO Security Lead

ECS is seeking an ATO Security Lead to work in our Arlington, VA office (Hybrid) . Please Note: This position is contingent upon contract award.

Job Description:

ECS is seeking talented professionals who love a challenge to join us in building the next-generation Continuous Diagnostics and Mitigation (CDM) Cyber data solution. The CDM Program is the Cybersecurity and Infrastructure Security Agency's (CISA) dynamic approach to strengthening the cybersecurity of Federal networks and systems through better awareness and visibility into their security posture and cyber threats. ECS is responsible for designing, building, deploying, operating, and maintaining a complete 'Data Services' solution which includes the collection, normalization, visualization, and sharing of cyber data from more than 100 Federal agencies. The CDM Data Services product is a cloud-hosted solution comprised of multiple Commercial Off the Shelf (COTS), software configuration packages, and custom code which work together to operate as an integrated solution tailored to meet DHS requirements.

We are seeking professionals who thrive in a dynamic, fast-paced, and highly collaborative environment where problem-solving, critical thinking, and a holistic approach to serving the mission are key. Our program operates within the Scaled Agile Framework (SAFe). An aptitude and enthusiasm for continuous learning, improvement, and cyber security is a must!

ECS is seeking an ATO Security Lead with superior leadership and technical knowledge to support the CDM Data Services program. They will report to the Operations Manager and will oversee their team of Security Engineers and Analysts. Specific responsibilities include but are not limited to:

• Providing security technical expertise and management of security analysts, security engineers, processes and procedures across the Data Services Program.
• Providing excellent leadership and applying their in-depth knowledge to lead and support the security architecture, implementation, deployment, and operations of the Data Services solution to achieve and maintain a DHS Authority to Operate (ATO) of the Data Services solution.
• Provide team building and facilitate growth, development of security engineers, and cross team collaboration and knowledge transfer for the new Data Services Solution.
• Evaluating the security of the Data Services solution to satisfy DHS security controls and program requirements as well as prevent attacks, damage, and unauthorized access.

Required Skills:

• ship and ability to acquire Public Trust Suitability.
• A Bachelor's degree with 8+ years of experience.
• In depth experience with supporting DHS Authority to Operate (ATO) processes and creating artifacts, control implementation details, incident management, DHS ISVM's, contingency planning and managing POA&Ms.
• In depth experience with National Institute of Standards and Technology (NIST) security controls, Cyber Security Assessment and Management (CSAM) Assessment and Authorization tool, Risk Management Framework (RMF), and Federal Information Security Management Act (FISMA).
• Experience with Vulnerability Management, SEIMs, Auditing Tools, End point security and other Security Tools.
• Experience with DHS Programs, DHS Security policies and procedures, and the DHS Systems Engineer Lifecycle (SELC).

Desired Skills:

• Establish relationships with other ISSM/ISSOs across DHS to solve and approve security issues.
• Experience with configuration and maintenance of IT Service Management (ITSM) tools such as Atlassian Jira in a production environment supporting Event Management, Incident Management, Problem Management, and Change Management.
• Experience implementing and executing work using the Scaled Agile Framework (SAFe).
• Experience with Splunk and Tenable Security Tools. Experience with supporting the ELK (Elasticseach, Kibana, Logstash) Stack in non-production and production environments.
• Experience with a SIEM tool such as Splunk desirable (i.e. creating queries, dashboards).

ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law. ECS promotes affirmative action for minorities, women, disabled persons, and veterans.

ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3800+ employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.

General Description of Benefits