Acquisition Program Security Officer (APSO) / Program Protection Analyst
Acquisition Program Security Officer (APSO) / Program Protection Analyst – Stafford, VA
Join our team as an Acquisition Program Security Officer (APSO) / Program Protection Analyst in Stafford, VA. We are seeking dedicated professionals with acquisition security, systems engineering, cybersecurity, intelligence, and technology protection experience to support Marine Corps acquisition programs in integrating Program Protection (PP), Critical Program Information (CPI) protection, Anti-Tamper (AT), Supply Chain Risk Management (SCRM), Operations Security (OPSEC), and acquisition security activities into a comprehensive mission assurance framework focused on preserving U.S. technological advantage and delivering resilient warfighting capability. This role is instrumental in ensuring sensitive and protected information is not errantly released outside protected boundaries.
Key Responsibilities:
- Analyze, develop, and evaluate acquisition, intelligence, and security policies
- Support Program Managers (PMs), Deputy Program Managers, and Integrated Product Teams (IPTs) in identifying, assessing, and protecting CPI, mission-critical functions, and sensitive acquisition technologies throughout the acquisition lifecycle
- Develop and assess Program Protection Plans (PPPs), CPI assessments, and protection strategies in accordance with DoDI 5000.83 and DoDI 5200.39
- Analyze adversary threat, exposure, vulnerability, and exploitation risk to acquisition programs, systems, software, hardware, interfaces, and supply chains
- Support integration of Anti-Tamper (AT), cybersecurity, OPSEC, SCRM, and system security engineering activities into acquisition protection strategies and program planning
- Assist acquisition programs in translating technical security risks into mission, operational, sustainment, and acquisition impacts for leadership decision-making
- Provide acquisition security and technology protection recommendations to PMs, IPTs, engineers, and security stakeholders regarding risk mitigation, protection prioritization, and lifecycle protection strategies
- Coordinate cross-functional acquisition security activities involving engineering, cybersecurity, intelligence, counterintelligence, logistics, contracting, and system security engineering stakeholders
- Recommend risk-based countermeasures to reduce adversary exploitation opportunities targeting CPI, mission software, embedded systems, sensitive interfaces, technical data, and supply chain exposure points
- Assess protection effectiveness and identify gaps in program protection, acquisition security, OPSEC, and technology protection implementation
- Work with subject matter experts (SMEs) from various acquisition competencies, intelligence communities, security, and counterintelligence to ensure delivery of resilient and uncompromised capabilities to the warfighter.
- Collaborate with Systems Security Engineers (SSEs), program offices, and intelligence stakeholders in developing and maintaining Security Classification Guides (SCGs), CPI identification and analysis, Criticality Analyses (CA), PPPs, and technology protection strategies.
- Support horizontal protection analysis to ensure consistent protection of equivalent CPI and mission-critical technologies across related acquisition programs.
- Assist in evaluating requirements for Anti-Tamper (AT), exportability considerations, cybersecurity, and system resiliency protections based on consequence of compromise and operational exposure.
- Support Supply Chain Risk Management (SCRM) and Trusted Systems and Networks (TSN) activities by assessing supplier, component, software, firmware, and sustainment risks affecting mission-critical functions and acquisition program integrity.
- Coordinate with logistics, engineering, cybersecurity, and sustainment stakeholders regarding counterfeit prevention, trusted supplier concerns, lifecycle exposure points, and supply chain threat mitigation strategies.
- Review acquisition documentation for potential security concerns
- Provide guidance regarding classification, Controlled Unclassified Information (CUI), distribution statements, OPSEC-sensitive information, and acquisition documentation marking requirements to reduce unauthorized disclosure and operational exposure risk.
- Conduct acquisition security and OPSEC reviews of public release materials, technical documentation, briefs, demonstrations, industry engagements, test activities, and external communications to identify indicators that could reveal sensitive program capabilities, vulnerabilities, or CPI.
- Support identification, assessment, reporting, and mitigation of acquisition security incidents, unauthorized disclosures, foreign collection concerns, and technology exposure events affecting program information or sensitive technologies.
- Support program-level OPSEC awareness efforts and recurring acquisition security risk communication activities intended to improve workforce awareness of adversary collection threats, exposure indicators, and technology protection responsibilities across government and contractor teams.
- Bachelor’s degree in engineering, cybersecurity, intelligence studies, systems engineering, computer science, national security studies, or related technical field, complemented by 4+ years of experience supporting DoD acquisition security, program protection, cybersecurity, systems engineering, intelligence, or technology protection activities.
- Knowledge and familiarity of a wide range of technology and program protection and security concepts, principles, and practices to review, analyze, and resolve highly difficult and complex protection and security problems.
- Knowledge and experience to use personal judgement in resolving complex protection and security issues and provide recommendations to properly accommodate both security and program requirements.
- Expert knowledge and understanding of pertinent DoD, DON, and HQMC security regulations, policies, directives, and procedures to facilitate, review and evaluate technology protection security documentation ensuring adequate protection for acquisition programs.
- Working knowledge of DoDI 5000.83, DoDI 5200.39, DoDI 5200.44, DoDD 5200.47E, DoDI 5200.48, and related DoD acquisition security and technology protection policies.
- Familiarity with Program Protection Plans (PPP), Critical Program Information (CPI), Criticality Analysis (CA), Anti-Tamper (AT), Operations Security (OPSEC), and Supply Chain Risk Management (SCRM) concepts.
- Ability to evaluate adversary threat vectors, technology exposure pathways, and operational impacts associated with compromise of mission-critical technologies and acquisition systems.
- Experience supporting acquisition programs within Marine Corps Systems Command (MARCORSYSCOM), Naval Sea Systems Command (NAVSEA), Naval Air Systems Command (NAVAIR), or other DoD acquisition environments (former PEOs) preferred.
- The ability to communicate effectively, orally and in writing, to draft clear, concise reports (often dealing with highly complex technical issues) to provide technical guidance and briefings.
- Experience with MARCORSYSCOM preferred.
Strong communication skills with the ability to understand and interpret SCG information and relevance to CPI, PPP and proper marking of acquisition documentation. If you are ready to contribute to a vital security initiative, we welcome your application.
Salary Range (Based on Experience) - $110,000 to $140,000
Join a Top Workplace!
Alexandria Insights, a Service-Disabled Veteran-Owned Small Business (SDVOSB), was recently named one of The Washington Post’s Top 250 Workplaces in the Washington, D.C. Metro area—ranking #3 out of 98 in the midsize company category!
We are dedicated to helping our customers solve meaningful problems through the effective and efficient use of technology. If you're self-motivated, entrepreneurial, and hard-working, and you're looking to join a growing small company with big opportunities, we encourage you to apply.
Submit your resume today and take the next step in your career with one of the region’s top-ranked employers.
Alexandria Insights is an EEO/AA/Disability/Veterans Employer.
We consider applicants for all positions without regard to race, color, religion, creed, gender, marital status, veteran status, national origin, age, sexual orientation, disability, or any other legally protected status. We also provide reasonable accommodations for individuals who are unable to use the online system due to a disability.