Mobile Cyber Security Engineer

The Mobile Cyber Security Engineer will be part of the Mobile Integration Solution Team (MIST) supporting the program with a specific focus on the cybersecurity elements around mobile devices, mobile applications, mobile technologies, and mobile security to integrate COTS mobile solutions to the new Electronic Health Record (EHR).

Serve as the mobile security liaison between vendors and various government stakeholders.

Able to understand the client security construct and the implementation of the client’s medical device security, to enable troubleshooting of implementation, and potential re-engineering of designs and architectures.

A key resource to help identify potential issues / risks with the Authority to Connect / Authority to Operate (ATC/ATO) of commercial mobile devices to the secure joint enclave. Understanding of the client PPSM process is preferred.

Able to build and maintain cybersecurity artifacts to support the ATO/ATC process. For example, the Mobile Cyber Security Engineer will be responsible for creating or updating:  System Security Plan, Plan of Action and Milestone, Network Topology, PPSM, Hardware/Software List, etc.  Documents will be maintained as Microsoft Office documents and within eMASS.
Analyze security reports related to mobile technologies (apps, devices, etc.), identify gaps, and provide feedback to mature artifacts.

Provide technical strategies and guidance for implementation of the Risk Management Framework to support client ATO/ATC activities.

Provide evaluations in the form of technical guidance, white papers, and strategy briefs on Cyber Security Tools, network topologies to senior leadership.