Description

Perform security controls assessments (SCA) using NIST guidance in compliance with FISMA regulations.

Responsibilities

• Interview stakeholders, including developers, ISSOs, users, and administrators, to determine security control implementation.
• Execute assessment plans by following procedures, collecting evidence, and documenting findings.
• Update System Security Plans (SSP) based on actual control implementation identified during assessments.
• Develop Security Assessment Reports (SAR) for management, including residual risk statements, impact analysis, and corrective actions.

Required Skills

• 5+ years of experience performing security assessments or audits on information systems.
• Knowledge of Federal security test and evaluations and vulnerability scanning.
• Knowledge of Plan of Action and Milestones (POA&M) management.
• Understanding of System Change Management and Contingency Plan creation, testing, and maintenance.
• Familiarity with Interconnection Security Agreements, MOU, MOAs, and Interface Connection Documents.
• Knowledge of IT Security Engineering Life Cycle and Release Management.
• Understanding of Certification and Accreditation (C&A) and Security Assessment and Authorization (SA&A).
• Familiarity with NIST SP 800-18, 37, 53, 53A, 60 and OMB A-130a.

Preferred Skills

• One of the following certifications: CCNA Security, CySA+/CSA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+ CE, CCNP Security, CISA, GCED, GC IH, CCSP, CAP, CISM, GSLC, CCISO, HCISPP, CEH, GSNA, CFR, or PenTest+.
• Existing IRS Clearance.

Key Skills

Education

ANY GRADUATE