Standard Job Description

This position requires current Final Secret clearance and ability to obtain Top Secret clearance.

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. 

Key Responsibilities of this role includes:

- Support day-to-day information system security operations including hardware and software implementations.

- Carry out technical administration of IS in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).- Upkeep, monitor, analyze, and respond to network and security events.

- Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M) with Key Stakeholders to address non-compliance in the allotted time frame.

- Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.

- Auditing is a large part of this role’s responsibility 

Basic Qualifications

-Current Final Secret clearance and ability to obtain Top Secret clearance

-DoD 8570 IAT Level II certification or ability to obtain within 6 months of hire 

-Knowledgeable of operating system security requirements 

-Familiarity with industry standard Information Assurance tools

Desired Skills

-Information Systems auditing experience

-Demonstrated technical experience in Windows and Linux based operating systems and command line

-Experience working with, assessing, and securing embedded operating systems / OT equipment

-Experience in system hardening, analysis, and vulnerability management

-Experience working with system accreditation requirements and RMF implementation

-Understand Agile operations while possessing sound business acumen

-Experience setting up or using Tenable Nessus / Security Center

-Experience setting up or using Splunk

-Experience with scripting languages 

-Experience with NIST 800-53 controls

-Experience implementing or validating Secure Technical Implementation Guidance (STIGs) 

-Bachelors degree from an accredited college in a related discipline, or equivalent experience/combined education, with 2 years of professional experience; or a related Masters degree