Responsibilities
- Provide services related to the enhancement, expansion, or consolidation of cybersecurity information assurance support
- Support in performing security impact assessments, security testing, and working with operations and development teams on remediation and mitigation of findings
- Provide support to planning, designing and implementing security controls which safeguard and monitor events for information systems, enterprise applications and data
- Provide information system security engineering support to verify and validate proposed architectures and implementations based on sound security engineering principles and practices
- Identify security requirements and provide input to the system design to ensure the proper controls are built-in
- Participate in planning and executing in the system development life cycle of new system cycles
- Conduct risk analysis and update the risk assessment report for all changes to the FISMA systems; and provide a security impact analysis to include but not limited to the change to the overall system risk rating and posture and documentation that is impacted requiring updates
Requirements
- 5 years of professional ISSE experience or similar roles in the cybersecurity / IT space
- Experience performing IT product security specification reviews
- Prior experience in creating Security baselines for Information systems and must perform a Security Impact analysis for all exceptions or deviations
- Understanding of the NIST Risk Management Framework and associated special publications (800-37, 800-53, etc)
- Understanding of cloud solutions e.g. IaaS, PaaS, and SaaS
- Cloud related experience and or certifications
- Communication, written, verbal JCAM experience preferred
Core Competencies
Demonstrates expertise in cybersecurity information assurance, including security impact assessments, risk analysis, and the implementation of security controls. Proficient in the NIST Risk Management Framework and cloud solutions, with a strong focus on system security engineering and compliance.
Certifications & Qualifications
- Cloud Certifications