Description

You will act as a technical security advisor and officer to business owners and stakeholders.

Responsibilities

• Author RMF A&A documentation including System Security Plans, Privacy Impact Assessments, Contingency Plans, and Incident Response Plans.
• Execute security operations tasks such as vulnerability management, role-based access controls, data-masking, and audit log analysis.
• Lead POA&M remediation and control finding closures using required evidential matter.
• Perform technical and documentation continuous monitoring tasks to support security control assessments.
• Provide security design and impact analysis for enterprise operations, solutions, and agency systems.

Required Skills

• 5+ years of technical experience in cybersecurity.
• 5+ years of experience with Federal certification and accreditation (A&A).
• 5+ years of experience maintaining IT security policies, processes, and guidance.
• Deep understanding of NIST RMF 800-137 Rev2 and NIST security control sets (800-53 Rev4, 800-53 Rev5).
• Experience applying the NIST Cybersecurity Framework and Federal Risk and Authorization Management Program (FedRAMP).
• Experience developing and managing continuous monitoring and Plans of Action and Milestones (POA&M).
• Professional knowledge of incident response, insider threat investigations, forensics, and cyber threats.
• Bachelor’s degree in computer science or a related field.

Preferred Skills

• Experience with CSAM, USDA security, AWS, Azure, or other cloud service providers.
• CISSP, CISM, CAP, or equivalent certification.
• AWS or Azure Security Specialty certifications.
• Master’s degree.

Key Skills

Education

Bachelor’s degree