Overview

Edgewater is currently looking for an Information Assurance Specialist to support a federal customer in the Washington DC area.

 

The Information Assurance Specialist utilizesknowledge of Federal sector security processes, hardening of systems, and is essential to the team in managing projects in Azure DevOps, applying Scrum principles and practices to remove impediments and deliver value and foster a collaborativeenvironment.

Responsibilities

Responsibilities include, but are not limited to the following:

• Researches, organizes, writes, edits, trains,and produces technical data, guidelines, templates, and policy to support Security Engineering.

• Perform information security risk assessments across a variety of platforms and applicationssubmittedthrough the Change Management process.

• Guide users indeterminingand integrating baseline security requirements, advise on viability of alternative approaches and conduct and evaluate feasibility studies.

• Propose remediation/mitigating controls and recommendations to stakeholders and management to minimize risk.

• Address security concerns or issues with proposed software and hardware projects to ensure baked-in security considerations in project proposals.

• Lead security team engagements to build and mature processes to produce written Standard Operating Procedures with a focus on improvement to FERCs Information Assurance processes, methodologies, and communication methods.

• Support iterative review of security assessment results and work with stakeholders across organizations to provide structure around risk management and internal controls.

• Experience with CIS Benchmarks and DISA STIGs toprovidesystem hardening guidance.

• Maintain a Master Library of Security Benchmarks for relevant systems as a reference for essential baseline security requirements,complianceand continuous monitoring capabilities.

• Provide status updates and follow-up on active open Security Engineering tickets.

• Align with and support the execution of the Cybersecurity Information Assuranceorganizationvision and strategy.

• Development of security guidance, policies, and procedures.

• Ability to obtaina PublicTrust clearance.

• Other duties as assigned.

Qualifications

• Bachelors degree or equivalent work experience in relatedfield.

• Experience with leading daily scrums, sprintplanningandfacilitatingthe scrum process.

• Sound cyber security knowledge foundation, to include understanding of Computer andnetworktechnology fundamentals.

• Strong familiarity with NIST Security Controls (NIST 800-53).

• Experience with security tools in an enterprise environmentto includeinstallation, configuration, usage, and troubleshooting.

• Demonstrate securityexpertisewith multipleWindows,and Unix-based operating systems.

• Excellent verbal and written communication skills and ability to build strong relationships with stakeholders at all levels.

• Strong problem-solving capabilities and the ability to effectively communicate solutions.

• Strong analytical capabilities.

• Strong understanding of how computer systems and networks are secured and in compliance with government and industry regulations.

• Ability to independently collect, review, and evaluate IT product data toidentifyand characterize security threat sources of concern and provide recommendations to Government leadership.

Preferred Qualifications:

• Experience with government contracting firms supporting the Federal government.

• Experience with CloudproviderspreferablyAzure.

• Scrum Master certification.

• Familiar with using agile tools for day-to-daytaskingpreferably Azure Dev Ops.

• 3-5 years of relevant work experience withnetwork engineering and/or system administration background (Unix/Linux/Windows).

• Experience with ServiceNow.

• Some experience with Change Management and/or ITIL certified.

• Respond to service requests and support change management security review process.

• Subject matterexpertisein information security best practices.

• Ability to articulate ideas to both technical and non-technical audiences through excellent written and oral communication skills.

• The ability toestablisheffective relationships with internal partners and teams.

 

Physical Demands:The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonableaccommodationsmay be made to enable individuals with disabilities to perform the essential functions. 

• While performing the duties of this job, the employeeis regularly required totalk orhear.

• Possess the ability to fulfillany and alloffice activities normally expected in an office setting, to include, but not limitedtoremainingseated for periods of time to perform computer entry,participatingin filing activity,liftingand carrying office supplies.

• The employee must occasionally lift and/or move up tofifteen (15)pounds.

• Fine hand manipulation (keyboarding).

 

Work Environment:Thework environment characteristics described here are representative ofthose anemployee encounters while performing the essential functions of this job.Reasonableaccommodationsmay be made to enable individuals with disabilities to perform the essential functions.

• May work prolonged or irregular hours.

• The noise level in the work environment is usually moderate.

• Exposure to general office conditions while conducting office duties.