6+ years of relevant experience in information security.
Familiarity with FISMA processes and NIST guidance.
Experience writing security controls is essential.
Professional certifications such as Security+, CISSP, CISA, GSEC, or GSLC preferred.
Knowledge of US Government Information Assurance Security Processes is highly regarded.
Responsibilities
Conduct security assessments of system security plans to ensure compliance with security requirements.
Assess the effectiveness of management, operational, and technical security controls.
Ensure IT systems adhere to defined security configurations and assist in creating enforcement processes.
Support risk management by assigning impact ratings and developing Plans of Action and Milestones (POA&Ms).
Evaluate vulnerabilities in information systems and recommend corrective actions through security assessment reports.
Advise application developers on ISSO standards throughout software and project management lifecycles.
Serve as a primary technical advisor for clients regarding ISSO compliance.
Benefits
100% company-paid medical coverage including health, vision, and dental.
Basic life insurance and AD&D insurance provided.
Short-term and long-term disability insurances included.
Access to pre-tax benefits programs.
Paid holidays and generous vacation/PTO/sick leave.
401(k) retirement plan available.
Job-related education and training assistance offered.
Employee referral bonus program.
Full Job Description
Responsibilities:
Conduct security assessments of system security plans to help ensure that plans provide security controls for information systems that meet stated security requirements.
Conduct comprehensive assessments of the management, operational, and technical security controls employed within or inherited by an information system to determine the overall effectiveness of the controls.
Ensure compliance of security configurations for IT systems and aid in providing clear and concise processes and procedures for the implementation and enforcement of system security configurations.
Support the risk management process by helping to determine and assign risk impact ratings in accordance with Information Assurance for Information Security Officers (ISSO) standards guidelines and methodologies and by aiding in the development and maintenance of Plans of Action and Milestones (POA&Ms) for IT systems identified in the Risk Management Framework (RMF) process and annual security assessments of IT systems.
Provide assessments of the severity of weaknesses or deficiencies discovered in the information system and its environment of operation and recommend corrective actions to address identified vulnerabilities and prepare the security assessment reports containing the results and findings from system security assessments.
Multi-task capability, handling multiple projects and serves as advisor for other application development staff to ensure ISSO standards are adhered. Serves as primary contact and technical advisor to clients and application developers to provide established ISSO standards during and post software development lifecycle and project management lifecycle.
Possess extensive knowledge of the US Government Information Assurance Security Processes.
Familiarity with the Security Technical Implementation Guide (STIG) and Security Readiness Review (SRR) is desired.
Knowledge of Information Assurance policies and procedures, and processes are also desired.
Prefer to have hands on experience and at least one of the following professional certifications: Security+, CISSP, CISA, GSEC, or GSLC & OS Certificates.
Qualifications:
Familiarity with FISMA processes, NIST guidance, and experience writing security controls.
A minimum of 6 years of relevant/relatable experience is desired.
Security Clearance:
Secret
Benefits:
100% Company Paid Medical Coverage including Health, Vision, and Dental
Basic Life Insurance and Accidental Death and Dismemberment Insurance (AD&D)
Short-Term and Long-Term Disability (STD/LTD) Insurances
