Information Systems Security Developer
Core
Customer-facing information security role supporting complex systems in a government and defense environment, focusing on security engineering, procurement, risk governance, and Risk Management Framework activities.
Role type
Senior IC Information Systems Security Developer
Builds
Security controls, policies, and risk mitigation strategies for government and commercial systems
Domain
Defense industry + Information Security
Required skills
Security engineering, Risk Management Framework (RMF), DoD acquisition, supply-chain risk assessment, security policy development, compliance analysis, security controls selection, technology security assessment
Preferred skills
Prior service in communications/networking-focused MOS (25B, 25H, 25U, 25S)
Technologies
Doctrine Support Security
Responsibilities
Define and meet complex system-wide information security requirements based on user, policy, regulatory, and resource needs; Support customers in developing and implementing doctrine and policies; Apply security engineering to common-use government and commercial systems; Ensure acquisitions, procurements, and outsourcing efforts address information security requirements consistent with Army and DoD standards; Evaluate, validate, and implement security improvement actions as needed; Assess how effectively procurement activities address information security requirements and supply-chain risks, and recommend improvements; Identify alternative information security strategies to meet security objectives; Assess the IT security implications of new technologies and technology upgrades, and interpret or recommend security requirements based on their capabilities; Analyze patterns of noncompliance and determine their effects on risk levels and enterprise effectiveness; Monitor and assess cybersecurity safeguards to confirm they provide the intended protection; Participate in risk governance by addressing security risks and mitigations and providing input on other technical risks; Promote security awareness among management and support the implementation of sound security principles; Contribute to Risk Management Framework activities and related documentation, including system life-cycle support plans, concepts of operations, operational procedures, and maintenance training materials; Help select cost-effective security controls to mitigate risks to information, systems, and processes.
