We are looking for a talented 'Other Customer Funds (OCF) Cybersecurity Lead' to support cybersecurity activities in support of PMW-160 . This is a full-time position working out of San Diego, CA.
If you are comfortable in intense, fast-paced environments, can think on your feet, and can excel in team-based collaborative efforts, then this may be the right job for you.
The Cybersecurity Lead will coordinate all cybersecurity activities to support Assessment and Authorization (A&A) Package documentation planning and development for all OCF platforms.
You Will:- Prepare, develop, and maintain Risk Management Framework (RMF) artifacts, packages, and deliverables to support system validation and authorization to operate (ATO)
- Perform risk and vulnerability assessments in network, system, and application areas
- Coordinate day-to-day cybersecurity operations with program technical leads to discover cyber risks, understand applicable policies, and develop mitigation plans
- Maintain RMF documents for system baseline variants that have achieved ATO
- Work independently, identify problems and devise analysis and solutions, communicate results to both technical and non-technical audiences, and lead the accomplishments of client tasks from inception to completion
- Develop and deliver cybersecurity update presentations to high level stakeholders that incorporate analysis of National Institute of Standards and Technology (NIST) controls and identified expected system and workload impacts
You Have:- U.S. Citizenship
- TS/SCI Security Clearance with no Foreign Exception Package (FEP) requirements
- Experience working with Information Assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS).
- Experience working with the Information Technology (IT) systems for a DoD or government agency
- Experience leading Navy RMF projects, including A&A activities for up-to TS/SCI systems, and the preparation, direct development, and maintenance of RMF artifacts, packages, and deliverables
- Implement security controls and policies, perform cybersecurity compliance testing using industry standard tools, and perform vulnerability analysis and remediation of networks, systems, and communications protocols
- Experience with eMASS, including Security Plan development and hands-on processing of packages through workflows, assisting with generating security policies, evaluating assessment documentation, and developing written security risks, mitigations, and recommendations
- Experience with architecture visualization, and developing and maintaining system artifacts, including Boundary Diagrams and Data Flow Diagrams
- You have the drive to be a self-starter, execute tasks independently, and communicate with clarity, both verbally and in writing
- DoD 8140 qualified to include relevant education, training, and certification(s) - equivalent to the former DoD 8570 IAT II at a minimum
Education/Experience:- Bachelor degree from an accredited university in a technical or managerial related discipline
- Minimum of four (4) years of experience in a Cybersecurity, Engineering, Test and Evaluation (T&E) or A&A related field
We Would Be Impressed If You Had:- Experience with DoD Security Technical Implementation Guides (STIG) and Evaluate-STIG
- Experience deploying, implementing, maintaining, and integrating cybersecurity tools and applications in alignment with the current threat landscape, and analyzing risks and opportunities at both tactical and strategic levels
- Experience with developing and maintaining cyber schedule, performance, and quality metrics within the systems development lifecycle and acquisition lifecycle
- Master's degree in an Engineering, Computer Science, or equivalent technical discipline
- Operating System (OS) Certification(s) e.g., Windows, RedHat, Linux
