William Roberson Email & Phone Number

Montgomery, Al, Us

The Cybersecurity Subject Matter Expert is responsible for providing leadership and management assistance in designing, developing, integrating, and testing cybersecurity requirements throughout the program. This position may directly support the chief engineer and provide specific knowledge to inform division leadership decisions regarding cybersecurity. This position is the functional lead for cybersecurity and is expected to ensure active functional participation in all relevant meetings to develop plans and contingencies for system implementation.

Montgomery, Alabama Area

Serves as the Wing Information Assurance Manager. Applies Information Technology (IT) security principles, methods, and security products to protect and maintain the availability, integrity, confidentiality, and accountability of information system resources and information processed throughout the system’s life cycle. Establishes and publishes base-wide policy to manage the INFOSEC (also known as COMPUSEC) program and provides advice and guidance in its implementation and in procedures used in the development and operation of systems. Assists all base organizations in the development of their individual INFOSEC program. Disseminates information and ensures computer security practices are adhered to by all functional areas. Reviews, analyzes, and validates certification and accreditation (C&A) packages. Continuously identifies and analyzes threats and vulnerabilities to the information systems to maintain an appropriate level of protection. Ensures computer software designs address information system security requirements. Accomplishes risk analysis, security testing, and certification due to modifications or changes to computer systems. Evaluates, assesses, or locally tests and approves all hardware, software, and firmware products that provide security features prior to use on any accredited information system or network. Certifies all software prior to installation and use on communications and computer systems. Executes computer security plans and enforces mandatory access control techniques such as trusted routers, bastion hosts, gateways, firewalls, or other methods of information systems protection..

United States

Responsible for assessing application and software cybersecurity (confidentiality, integrity, and availability) readiness by performing individual internal assessments as part of the Risk Management Framework. The role requires specific knowledge of application, system, and network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, electronic communications systems, electronic communication services, wire communication, and electronic communication, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and non-repudiation. The SCAR is charged with providing authoritative technical guidance and oversight related to information systems security, including cybersecurity frameworks, controls, and auditing requirements; monitoring compliance of security programs designed to minimize system vulnerabilities by adhering to information systems security, regulations, protocols, or security certification and accreditation requirements; and serving as a senior representative for complex, high-visibility information technology projects.

Montgomery, Alabama Area

GENERAL FUNCTION:Research, identify and (as necessary) document system security requirements.Design and document systems security architecture.Perform system security analysis, identify risks, and recommend a course of action to mitigate any security risks.Develop System Security Authorization Agreement (SSAA) or like Security Documentation Package IAW appropriate guidance and directives (e.g. DITSCAP, DIACAP and FISMA.Develop and document security test scenarios.Participate early and often within the confines of the System Engineering Process (SEP).Conduct Security Test and Evaluation (ST&E) and/or Certification Test and Evaluation. Understand and implement (up to and including most recent) Department of Defense (DoD), NIST and Federal agency security requirements using applicable DoD and Federal guidelines, Executive Orders, and laws.Work independently while understanding the necessity for communicating and coordinating work efforts with other employees and organizationsEstablish and maintain effective professional working relationships with co-workers, and customers.