Bachelor's degree in Information Technology, Business Management, or related field.
Minimum of 8 years of cybersecurity experience.
Hands-on experience with risk and vulnerability assessments.
Extensive knowledge of Federal Cybersecurity regulations (NIST, FISMA).
CISSP or equivalent Cybersecurity certification required.
Active Secret Clearance.
Responsibilities
Enhance cybersecurity assessment operations through SOPs.
Analyze vulnerabilities and recommend improvements.
Review program-level documentation and provide recommendations.
Develop and document security evaluation test plans.
Research and develop relevant information security policies.
Lead technical exchange meetings and document outcomes.
Conduct hands-on security testing and analyze results.
Benefits
Opportunities for professional development and training.
Collaborative team environment.
Engagement with federal contracts and stakeholders.
Potential for leadership roles in technical discussions.
Full Job Description
Core Responsibilities
Provide enhancement capabilities and SOPs to cybersecurity assessment operations for execution and implementation.
Provide analysis of vulnerabilities.
Review and make recommendations on program-level documentation (e.g., requirements specification, system architecture, design documents, test plans, security plans, etc.).
Develop and document security evaluation test plans and procedures.
Assist in researching, evaluating, and developing relevant Information security policies and guidance.
Actively participate in or lead technical exchange meetings, documenting actions items and results of these events.
Brief leadership, as needed, on the status of action items and/or results of activities.
Conduct hands-on security testing, analyze test results, document risk, and recommend countermeasures.
Coordinate with other program organizations conducting security testing.
Assess and calculate risk-based on threats, vulnerabilities, and shortfalls uncovered in testing.
Identify mitigation countermeasures to identify threats, vulnerabilities, and shortfalls.
Provide oversight of the design, development and implementation of security-related support systems.
Minimum Requirements
Education: Bachelor's degree in Information Technology, Business Management or a related field.
Experience: Minimum of 8 years of cybersecurity experience.
Technical Proficiency: Hands-on experience conducting comprehensive risk and vulnerability assessments. Extensive knowledge of Federal Cybersecurity regulations, policies and guidelines (e.g., NIST, FISMA and associated guidelines). Experience developing and maintaining system and enterprise level information assurance documentation. Ability to support security engineering activities and ensure security requirement are incorporated into system design, architecture and configuration baselines throughout the systems lifecycle.
Compliance: Ensure compliance with Federal cybersecurity regulations, including NIST, FISMA, and associated guidance. Ensure artifacts, assessments, and system configurations remain aligned with NIST SP 800-53 controls, FedRAMP baselines, Federal agency policy and directives.
Certifications: CISSP or equivalent Cybersecurity certification (e.g., Security+).
Active Secret Clearance
Preferred Expertise
Demonstrated success supporting Federal contracts.
Strong background coordinating with stakeholders (e.g., system owners, ISSOs, architecture teams, and cybersecurity leadership) to validate system requirements, address information assurance concerns, and resolve compliance or security issues.
Strong analytical, written, and verbal communication skills, with the ability to translate technical risks and content into terms suitable for executive and government stakeholders.
Ability to work collaboratively with others and contribute to a team environment.
