Plan, design, build, integrate, test, implement, deploy
and administer IT and INFOSEC solutions using emergent security and encryption technologies and services
Advise and make recommendations to government customers in all areas of security and business
analysis
Provide
security liaison services among client agency cyber centers to enhance shared situational awareness
Provide guidance for policy documentation
and implementation
Provide advisory support for the common operating
picture geospatial visualization tools, reporting tools, and modernization of the environment to virtual machine and
cloud in order to follow IT efficiency directives
Certification & Accreditation
Responsible
for the C&A process including ST&E/CT&E (Security Test and Evaluation & Certification Test and Evaluation)
Implement secure enterprise networks using a Defense-in-Depth approach, in accordance with
DCID 6/3, DITSCAP, NISCAP processes and NSA methodologies
Information System Security
Provide
advisory and technical security support on a broad range of security issues including:
System threat vulnerability and risk assessments
System security
requirements/architectures
Security risk management
Test & evaluate security management tools according to specific system level security requirements,
addressing SLA's, performance, and total cost of ownership
Identify limitations
in combining components & mechanisms
Evaluate security solutions for
the infrastructure
Engineer security solutions for modernization &
various mission projects and enterprise level efforts using VPN (Safenet), auditing and monitoring (Esecurity), firewalls
Pilot program development
Staff certifications
Certifications
meet the highest level of DoD Directive 8570
CISSP Certified Information
Systems Security Professional
CEH Certified Ethical Hacker
ISSEP Information System Security Engineering Professional
