Address
Form of work3 Reasons Consulting is seeking candidates with 5+ years of cybersecurity experience to join our team as a Specialist, Information System Security III (SISS3). The Specialist position supports a large software development program which includes software maintenance and development, IT support (Network/Workstation/Server), systems integration and life cycle support, enterprise application development, network engineering, and Information Systems security (ISS). They will work with other security professionals in developing and implementing strategies to detect and mitigate threats to Information Systems, protect critical data sets, and provide assessments of system and network vulnerabilities. They will analyze threats and develop and implement best practices methodologies for incident detection, reporting, and vulnerability remediation.
Primary Responsibilities:
- Facilitate movement of multiple Information Systems through the RMF process and maintain accreditations through continuous monitoring and annual reviews
- Provide solutions to complex problems that require the regular use of expertise and creativity. Problems are broadly defined and solutions require the continuation of specialize theories and knowledge
- Serve as Subject Matter Expert (SME) on one or more technologies/skills related to A&A activities
- Conduct risk and vulnerability assessments of Information Systems to identify vulnerabilities, risks, and protection needs
- Actively lead and participate in regular A&A status meetings with government and contract personnel to facilitate progress and address potential issues of RMF system efforts
- Participate in sessions aimed at identifying, planning, and executing strategies in response to emerging cybersecurity/RMF policies
- Maintain awareness and knowledge of evolving security and risk management standards and communicate and apply relevant changes to existing processes
- Develop, update, and/ore review RMF documentation to include Security Plans, Implementation Plans, Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports
- Assess system compliance against NIST, and DoD security requirements to include the NIST 800-53 controls, and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)
- Produce evidence as necessary to support compliance status of NIST and DoD security requirements
- Work with system administrators, engineers, and developers to create or update system/site polices, procedures, and process guides
- Coordinate with other system SMEs to identify and develop authorization boundary diagrams, architecture diagrams, and hardware and software inventories
- Analyze vulnerability scans of Information Systems and assist in remediation tasks
- Lead or attend meetings with stakeholders to discuss statuses of efforts
- Submit weekly reports to leadership regarding system/program status
Required Qualifications:
- Bachelor's Degree in a technical related discipline
- DoD 8570 certification (IAT Level 2)
- Hands on experience with the DoD tool eMASS
- Experience performing analysis of logs and events
- Experience automating processes through scripting
- Demonstrated experience with Risk Management Framework (experience under Department of Navy is a plus)
- Demonstrated efficiency and experience in RMF package development, including POA&Ms (mitigation statements), Security Plans, Risk Assessments, architecture diagrams, hardware/software inventories, and system/site policies, procedures, and processes
- Familiarity with NIST publications
- Experience in assessing systems using NIST 800-53 and/or DISA STIGs and SRGs
- Excellent customer service and organization skills
- Excellent oral and written communication skills
Desired Qualifications:
- Experience under ACAS and HBSS
- Experience in RMF policy development, process improvement, and strategy implementation
- Knowledge in Continuous Monitoring and Risk Scoring (CMRS)
Clearance Required:
- Active Secret security clearance
Company Paid Standard Benefits:
- Short/Long Term Disability
- Basic Life Insurance
- Direct Payroll Deposit
- Leave Accrual
- Holidays
- 401(k) Match
Employee/Company Shared Benefits:
- Additional (Voluntary) Life Insurance
- 401(k)
- Medical Coverage
- Dental Coverage
- Vision Care Plan
- Flexible Spending Account Plan
