Computer and Information Systems Manager (JOURNEYMAN) - Onsite, National Capital Region

BluePath Labs•Washington, DC

2d•$150,000 - $170,000•Onsite

About The Position

BluePath Labs is seeking a TS/SCI Computer and Information Systems Manager to support our clients at the Department of War (DoW). This position is contingent upon contract award and is for inclusion in a proposal for an upcoming government contract. The role involves providing comprehensive cybersecurity expertise, including vulnerability assessments, artifact analysis, and support for Mission Defense Teams.

Requirements

U. S. Citizen.
Top Secret clearance with SCI eligibility.
5-10 years of relevant experience performing cybersecurity, information assurance, vulnerability assessment, system security engineering, network security, or cyber operations functions.
Expert knowledge of the Information Assurance Vulnerability Management (IAVM) program and the Enterprise Mission Assurance Support Service (eMASS) for Risk Management Framework (RMF) reporting.
Proficient in the security principles of Data-at-Rest and Data-in-Motion.
Familiar with the following NIST Special Publications (SP): 800-218, 800-209, 800-207, 800-184, 800-161, 800-137, 800-123, 800-94, 800-82, 800-53, 1800-35, 1800-34, 1800-14, and 1800-10.

Nice To Haves

CISSP, CASP+, or CISM certification
Experience supporting Department of War cyber operations and Mission Defense Teams

Responsibilities

Conduct continuous assessments of existing and proposed software and hardware systems to identify vulnerabilities.
Produce research, evaluations, and formal position papers detailing findings and recommending mitigation strategies.
Lead or attend cybersecurity working groups focused on threats to both legacy and next-generation systems.
Provide subject matter expertise to Mission Defense Teams for software program reviews and network security operations.
Review and analyze a wide range of software, network, and security artifacts for credibility, including: project management documents, code, and user test cases; system documentation, diagrams, and user manuals; Authorization to Operate (ATO) packages; Information Assurance Vulnerability Alerts (IAVAs).