Enterprise Cybersecurity Principal

Applied Research Solutions•Colorado Springs, CO

2d•$165,000 - $175,000

About The Position

Applied Research Solutions is seeking candidates with an Enterprise level cybersecurity skill set. The primary focus of the enterprise-level cyber security requirement is, in concert with the SZQ Government ISSM, develop and implement clearly defined and consistent cyber security process across the SZQ Directorate portfolio. In addition, the enterprise-level cyber security SME is required to advise and provide recommendations to the Government ISSM, as well as implement direction and guidance of the government ISSM.

Requirements

Must be a US citizen
Must have a minimum of a Secret Clearance (Position will require a TS clearance)
7 years of experience within a DoD setting

Nice To Haves

Bachelor's degree preferred

Responsibilities

Full integration of cyber security into all phases of acquisition, upgrade, and modification programs, including design, development, testing, fielding, operation, sustainment, and the DoD Cybersecurity Authorization Processes.
Provide oversight with the Directorate RMF compliance. The cyber security SME encompasses the full range of cyber security and information security processes, procedures, and functions, to include reviewing data, maintaining/implementing and compliance notification of required IAVAs, NOTAMs and cybersecurity posture for systems.
SME support includes advising division leadership on architecture mitigations to limit risk posture within the systems, and represent the risk posture in briefings and slides to DoD Chief Information Officer, Headquarters USSF and USSTRATCOM; utilize National Institute of Standards and Technology (NIST) 800 series special publications in the development of new system artifacts to ensure compliance with RMF and emergent Cybersecurity Framework (CSF) requirements and to interpret requirements as necessary to ensure system compliance or provide operational justification for exceptions when deemed necessary.
Develop a focused approach in the continual improvement of processes and producers to manage the RMF packages in Enterprise Mission Assurance Support Service (eMASS), Xacta and SGN/CORE (as needed), controls and Plan of Action and Mile Stones (POA&Ms).
Provide Cyber Security and authorization support services, assist the Government with the preparation of Cyber Security documentation: ATPs, Authority to Test (ATT), Authority to Operate (ATO), Authority to Connect (ATC), Plan of Action and Milestones (POA&M), Authorization Decision Document (ADD), and Security Plan (SP).
Review Cyber Security documentation to ensure they satisfy Security Design/Security Test & Evaluation (ST&E) Requirements RMF Control identification, to include building implementation plans and validation plans, assist with the entry and review of entered information to the Information Technology Investment Portfolio Suite (ITIPS), assist with the preparation and review of Federal Information Security Modernization Act documentation.
Other duties as assigned