Cybersecurity and IA Specialist

Falconwood, Inc.•Suffolk, VA

4h•$95,000 - $105,000•Hybrid

About The Position

Falconwood is a woman-owned, veteran-owned company providing consultation and programmatic support to Department of Defense Information Technology (IT) initiatives and programs. We provide expert advice and consultation on a diverse range of IT subjects, focusing on acquisition, policy, cybersecurity, engineering, and process development. The Cyber Security and Information Assurance Analyst will Serves as primary security compliance agent for the Commander, Naval Information Forces (NAVIFOR) N6 Directorate. The candidate will support cyber security Assessment and Authorization efforts for NAVIFOR N6 directorate and subordinate commands through: Serves as primary security compliance agent. Performs vulnerability/risk assessments of computer systems and applications during all phases of the system development life cycle to support the RMF authorization process. Performing risk assessments for Navy RMF packages in accordance with published guidelines and requirements. Advise clients on Navy RMF requirements and procedures as situations dictate. Ensures that the quality of the program, project or task deliverable meets the established standards or metrics. Provides Cyber Security guidance at meetings, briefings and design reviews and during system development in accordance with prevailing Cyber regulations and policies. Supports the PM, SCA, ISSM, and ISSE throughout all phases of the security authorization process. Enables Cyber Security system designs that properly mitigate identified threats and vulnerabilities. Reviews and approves test and evaluation activities to validate those threats and vulnerabilities are mitigated. Performs system security reviews and Certification & Accreditation (C&A)/ Assessment and Authorization (A&A). Conducts A&A process for IT systems and networks in accordance with the DoD Risk Management Framework process. Analyzes and reviews the results of network and system vulnerability scans and be able to validate the implementation of IA Controls in accordance with DoD 8500.2. Assists with development and tracking of the POA&M in eMASS.

Requirements

TS/SCI clearance required (a current SSBI within the five-year scope).
Bachelor of Science Degree in IT, Computer Science, Cybersecurity, Information Systems, Computer Engineering or related discipline, or 7 years Cyber Security experience
Information Assurance Certification (GIAC) – Security Leadership Certification (GSLC), Certified Information system Security Professional (CISSP), or Certified Information Security Manager (CISM).
Navy Qualified Validator (NQV) designation.
At least five years’ experience in performing Navy Information Assurance and cybersecurity functions to include at least one year direct experience with RMF and its related components and instructions.
Capable of performing effectively individually and as part of a team.
Technically savvy and possess excellent communication skills.
Have effective critical thinking and problem-solving skills.
Self-motivated and able to successfully deliver with minimal supervision.
Proficient in Microsoft applications such as Word, Excel, PowerPoint, and Outlook
Knowledgeable of computers, networks, Cloud Technologies, security and related tools/technologies.

Nice To Haves

Navy Cyber Security experience and Navy RMF.
Experienced in risk assessment and validation requirements set forth by the NAVY SCA and NAO.
Familiarity with Navy Enterprise networks, such as NMCI and ONE-NET.
Familiarity with Navy IT sites, systems, and infrastructure.
Knowledge of eMASSter, STIG Viewer, and Navy Step 4 SOPs.
DoD 8570 IAM II baseline certification.
Knowledgeable in eMASS, VRAM, ACAS, and HBSS.

Responsibilities

Serves as primary security compliance agent.
Performs vulnerability/risk assessments of computer systems and applications during all phases of the system development life cycle to support the RMF authorization process.
Performing risk assessments for Navy RMF packages in accordance with published guidelines and requirements.
Advise clients on Navy RMF requirements and procedures as situations dictate.
Ensures that the quality of the program, project or task deliverable meets the established standards or metrics.
Provides Cyber Security guidance at meetings, briefings and design reviews and during system development in accordance with prevailing Cyber regulations and policies.
Supports the PM, SCA, ISSM, and ISSE throughout all phases of the security authorization process.
Enables Cyber Security system designs that properly mitigate identified threats and vulnerabilities.
Reviews and approves test and evaluation activities to validate those threats and vulnerabilities are mitigated.
Performs system security reviews and Certification & Accreditation (C&A)/ Assessment and Authorization (A&A).
Conducts A&A process for IT systems and networks in accordance with the DoD Risk Management Framework process.
Analyzes and reviews the results of network and system vulnerability scans and be able to validate the implementation of IA Controls in accordance with DoD 8500.2.
Assists with development and tracking of the POA&M in eMASS.