Classified Cyber Security Asc

About the Role

This role ensures compliance to governing documents and security policies, assists in regulatory periodic assessments, and implements and tests secure operating systems, networks, and database solutions. The position requires staying current with system vulnerabilities, providing security training, and conducting risk assessments with recommendations for secure implementation and compliance.

Key Responsibilities

• Ensure compliance to governing documents and security policies.
• Assist in regulatory periodic assessments.
• Implement and test state-of-the-art secure operating systems, networks, and database solutions.
• Stay current with system vulnerabilities.
• Provide current security training to all system users.
• Conduct risk assessments and provide recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines.
• Create, maintain, and submit information system security documents and reports to regulatory agencies.
• Assess and mitigate system security threats/risks throughout the program life cycle.
• Validate system security requirements definition and analysis.
• Establish system security documentation.
• Assist with the implementation of security procedures.
• Verify information system security requirements.
• Perform information system certification and accreditation planning, testing, assessing, and liaison activities.
• Provide architectural/risk-based analysis of information assurance/cyber security features and relate existing systems to future needs and trends and requirements.
• Familiar with information system security architectural documentation standards.
• Able to apply information assurance/cyber security standards, directives, guidance, and policies to an architectural/risk-based framework.

Requirements & Tech Stack

• Windows and Linux based operating systems.
• Command line proficiency.
• Information Assurance tools.
• NIST 800-53 (DAAG/JSIG) RMF implementation.
• System authorization requirements.

Qualifications

• Information Systems auditing experience (practical or education).
• Previous experience working with system authorization requirements and NIST 800-53 (DAAG/JSIG) RMF implementation (practical or education).
• Hands-on experience with industry standard Information Assurance tools (practical or education).
• Demonstrated technical experience in Windows and Linux based operating systems and command line (practical or education).

Desired Skills

• Possess a DoD 8140/8570 IAT Level I/II certification (e.g., A+, Security+ce).
• Experience in system hardening, analysis, and vulnerability management.
• Experience performing Continuous Monitoring.
• Experience setting up or using Tenable Nessus / Security Center.
• Experience setting up or using Splunk.
• Experience implementing or validating Secure Technical Implementation Guidance (STIGs).