Description

Lead Risk Management Framework (RMF) assessment and authorization for federal information systems. Own security control compliance and audit readiness.

Responsibilities

• Execute RMF assessment and authorization activities, developing complete A&A documentation.
• Ensure IT systems maintain security controls in compliance with NIST 800-53A standards.
• Analyze vulnerability results using Tenable.sc/Nessus, Splunk, App Detective, and WebInspect.
• Support onsite internal and external audits for designated systems.
• Report security incidents according to DHS 4300 policy timelines and present technical findings to executives.

Required Skills

• US Citizenship is required.
• Minimum three years of experience in Federal IT Security.
• At least one year of experience as an ISSO or performing ISSO duties.
• Active CISSP, CAP, CASP, or similar advanced IT Security certification.
• Thorough knowledge of NIST 800 series publications (800-30, 800-37, 800-53, 800-53a, 800-60).
• Three years of experience with enterprise network devices (routers, switches, firewalls).
• Three years of experience with UNIX, Solaris, and Microsoft operating platforms.
• Experience developing unified guidelines for system-level evaluations of federal networks.

Preferred Skills

• Previous experience as a security control assessor.

Key Skills

Education

ANY GRADUATE