Responsibilities:

• Provide systems security engineering support to all of the Sponsor’s applications and systems.
• Fill out and manage the entries for the Sponsor’s applications and systems in the Sponsor’s A&A system(s). This may include creating new entries for breaking apart or grouping together applications or systems.
• Assist in the steps of A&A functions by working with the engineering team on each A&A control and provide testing and audit logs to ensure A&A requirements are met.  This includes working with engineering teams on addressing system Plan of Action & Milestones (POAMs) and documenting that work in A&A systems.
• Provide proactive guidance on information security policies, regulations, and technical implementations with a solid understanding of cyber security operations and the Sponsor’s A&A processes.
• Actively participate in or lead technical exchange meetings and application review boards, to verify and validate systems security controls, while also documenting action items and results of those events.
• Provide briefings on system statuses and mitigation activities.
• Provide information and expertise to development teams and Sponsor staff on A&A and security status for applications, identifying areas of risk, and assisting with addressing those risks.

Required Qualifications:   

• Demonstrated experience with standard cyber security policies, guidance, research, evaluation, and development of relevant security policies.
• Demonstrated experience securing and providing risk mitigations for systems and applications in a cloud environment.
• Demonstrated experience with system configurations, development and design, specifically around enterprise systems.
• Demonstrated experience communicating both verbally and in writing, when responding to emails, telephone calls and in person inquiries from organizational personnel.
• Demonstrated experience with A&A and information security systems.

Desired Qualifications:

• Demonstrated experience with data science and data engineering tools and methods.

• Demonstrated experience with the Sponsor’s mission systems and applications.

• Demonstrated experience with system configurations, development and design, specifically around enterprise systems that use the Sponsor’s cloud offerings.

• Demonstrated experience with Sponsor A&A and information security systems.

• Certifications:

  • ISACA Certified Information Security Manager (CISM)

  • ISACA Certified Information Systems Auditor (CISA)

  • ISC Certified Information Systems Security Professional (CISSP)

  • ISC Certified Cloud Security Professional (CCSP)

  • ISC Certified Authorization Professional (CAP)

Bridge Core is proud to be an equal opportunity workplace and affirmative action employer. We celebrate diversity and are committed to creating an inclusive environment for all team members and applicants. At Bridge Core, we ensure fair treatment for our team members and applicants based on their abilities, achievements and experience without regard to race, national origin, sex, age, disability, veteran status, sexual orientation, gender identity or any other classification protected by law.