Security Engineer

Job Description
Tharros is seeking a skilled Security Engineer professional to support Department of Defense (DoD) systems through the full lifecycle of Assessment and Authorization (A&A) activities. This position will support NSWCDD in Dahlgren, VA. Responsibilities include authoring cybersecurity documentation, conducting system analysis, and developing A&A artifacts in alignment with DoD policies and standards (e.g., DoDI 8500.2, DISA STIGs, NSA guidelines). *Position is also available in Virginia Beach, VA*

Responsibilities:

• Develop and maintain A&A documentation using Microsoft Office tools (Word, Excel, Visio).
• Analyze and document system architecture and operations from a cybersecurity perspective.
• Identify system CONOPS and derive Mission Assurance Categorization.
• Recommend and implement logical and physical security solutions to meet DoD compliance requirements.
• Apply DISA STIGs and NSA recommendations to ensure system hardening.
• Identify and resolve compliance gaps between system configurations and DoD policies.
• Author and update system security requirements and specifications.
• Perform Red Team and Blue Team vulnerability testing using tools like ACAS and also manual techniques.
• Conduct and document risk assessments based on known vulnerabilities and threat actor tactics.
• Analyze and secure physical and virtual connectivity of Naval warfare systems and interfaces.
• Serve as Information Systems Security Officer (ISSO), managing all cybersecurity aspects of assigned systems.
• Define and implement Information Assurance Vulnerability Management (IAVM) Plans.
• Plan, execute, and document results of system security tests.
• Assist with developing cybersecurity requirements, policy standards, best practices, guidance and procedures for combat systems.
• Assist with analysis of cybersecurity, intelligence, and information technology policy gaps for combat systems.
• Conduct cybersecurity-related research, analysis, and coordination activities in support of DoD cyber assurance and policy efforts.
• Assist with development of cybersecurity risk assessment analysis and risk mitigation plans.
• Develop and/or use MBSE models to perform cybersecurity analysis.

Requirements

• Minimum of 2 years of experience with security engineering with Navy afloat/tactical combat systems, OR
• Minimum of 5 years of general security engineering experience.
• Preferred experience with Security Engineering on Combat Weapon Systems (Aegis, SSDS, Zumwalt)
• Minimum IAT Level II per DoD 8570.01
• Strong understanding of DoD Cybersecurity policies for both land-based and afloat/tactical systems.
• Ability to communicate clearly and succinctly in written and oral presentations.
• Minimum Active Secret Clearance.

Summary
Tharros combines extensive cyber defense knowledge with the world's preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward.

In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation's security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations.

Tharros. See Everything. Secure Anything.

Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status.