Cybersecurity Specialist- PEO Soldier

Semper Valens Solutions•Fort Belvoir, VA

5d•Onsite

About The Position

Semper Valens Solutions is seeking an experienced Cybersecurity Specialist to support our organization in the Ft. Belvoir, VA area. This position is contingent upon government approval. The role involves serving as a subject matter expert for cybersecurity/IT aspects of assigned programs, performing system architecture design, development, integration, testing, installation, and troubleshooting. It also includes translating military requirements into system concepts, participating in program reviews, and evaluating design efforts from a cybersecurity viewpoint. The specialist will prepare and review cybersecurity test plans, procedures, and reports, evaluate system performance against specifications, monitor field performance, assess risks, and prepare cybersecurity strategies. Extensive experience in operational Cyber Security accreditation and certification of embedded systems, understanding of AR 25-2 and the DoD Risk Management Framework (RMF), and experience with eMASS software are crucial. The role requires preparing IA approval documentation, understanding systems engineering processes, and possessing Network Security Architect experience. A deep understanding of DoD standards for cybersecurity policy, requirements, integration, engineering, and C&A is necessary. The specialist will perform security, analyses, and risk/vulnerability assessments, and execute daily C&A activities for project teams. For Level III, the role involves applying comprehensive knowledge to lead major assignments, assisting with IT/NSS/AIS vulnerabilities and threats, implementing the RMF, ensuring security control implementation, and reviewing RMF documentation. It includes assisting Program Management Offices with cybersecurity acquisition documentation, coordinating integration of Cybersecurity, COMSEC, and TEMPEST, supporting IG Cybersecurity Self-Assessment checklist compliance and FISMA, implementing audit measures, advising on complex computer security systems, and developing/maintaining training programs. The role also involves managing computer incident coordination and notification, generating analysis reports, and providing technical input for computer security incident documentation.

Requirements

Level II- BS degree and 5 years of experience.
Level III- BS degree and 10 years of experience.
Minimum of a Secret Clearance required.

Responsibilities

Serves as subject matter expert for all cybersecurity / information technology aspects of assigned program.
Performs top level system architecture related design, development, integration, testing, installation and troubleshooting.
Translates military operational and mission requirements (ground, sea, air, and space) into practical systems concepts and design performance requirements.
Participates in post awards, program reviews, design reviews, and IPTs as the cybersecurity specialist / engineering on assigned programs.
Evaluates and conducts design efforts from a cybersecurity viewpoint to ensure integration of all required cybersecurity products and adequacy of the analyses
Prepare and reviews cybersecurity related test plans, procedures, and reports on technical adequacy on assigned programs, for both Government and contractor tests, as well as related failure reports.
Reviews and evaluates system performance against cybersecurity related specification requirements, monitors and assesses field performance, and assesses risk of meeting user and specification requirements.
Prepares and evaluates cybersecurity security strategies for requested programs.
Extensive experience in operational Cyber Security accreditation and certification of embedded systems accredited at Secret level and below.
Extensive understanding of AR 25-2 and the DoD Risk Management Framework (RMF) to include actually current experience (less than 2 years old) in obtaining system accreditation using the DoD RMF and the Enterprise Mission Assurance Support Service (eMASS) software.
Extensive experience preparing recommended IA approval and supporting information documentation and understand systems engineering processes and possesses extensive experience in Network Security Architect experience.
Extensive understanding of the DoD standards guiding the development of cybersecurity policy, requirements, integration, engineering, and certification and accreditation.
Perform security, analyses and risk/vulnerability assessments.
Execute day to day certification and accreditation activities for a project team.
Possesses and applies a comprehensive knowledge across key tasks and high impact assignments and plans and leads major assignments to:
Assist on all matters relating to the vulnerabilities and threats to Information Technology (IT) Systems, National Security Systems (NSS), and Automated Information Systems (AIS).
Implement the Defense (DOD) Risk Management Framework (RMF) and assist to the System Security Manager (ISSM) ensure successful implementation of associated security controls and reviews all RMF documentation packages, and system fielding, operations, or upgrade requirements
Assist Program Management Offices with Cybersecurity related Acquisition documentation requirements (i.e. Cybersecurity Strategies) and statutory/regulatory/policy compliance.
Coordinate integration of Cybersecurity, COMSEC, and TEMPEST into the entire system life-cycle design, development, and deployment.
Support maintenance of DOD Inspector General (IG) Cybersecurity Self-Assessment checklist compliance and Federal Information Security Management Act (FISMA)
Implement audit measures to ensure compliance with regulatory requirements, participate in organizational inspections and surveys of computer systems, provide inspection results, and assess the adequacy of corrective actions taken.
Advise on all complex and unique computer security systems, make recommendations on the approval of various computer operations based on security guidelines, and provide alternatives to managers to meet security requirements based on the unique needs of the organization and mission requirements.
Assist in developing, maintaining, implementing and delivering a formal training and education program for computer and information security requirements and operation and maintenance of automated information systems in compliance with all applicable regulations and safeguards.
Analyze the vulnerabilities and weaknesses of existing computer security programs that could benefit from group training and translate those needs into training and education media.
Manage computer incident coordination and notification with the local Network Enterprise Center (NEC) and servicing Computer Emergency Response Teams.
Generate reports of analyses and processes the information in accordance with program procedures.
Provide technical input and writes documents to provide information, help prevent and increase understanding of issues involved in computer security incidents including, but not limited to internal documentation, advisories, and technical documents.
Assist with policy, programmatic, budget and doctrine issues associated with Cybersecurity within the organization, other U.S. Government agencies and other technical experts.