Information Assurance and Security, Lead Associate

Peraton•,

1d•$80,000 - $128,000•Remote

About The Position

Peraton is seeking a Information Assurance and Security, Lead Associate. This position will perform the following duties (but not limited to): This role is 100% Remote. Provides technical and programmatic information assurance services to internal and external customers in support of network and information security systems. Designs, develops, and implements security requirements within an organization’s business processes. Prepares documentation from information obtained from customer using accepted guidelines. Excellent writing, documentation, and interpersonal communication skills Prepares security test and evaluation plans. Provides certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments. Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps. Recommends system enhancements to improve security deficiencies. Develops, tests, and integrates computer and network security tools. Secures system configurations and installs security tools, scans systems to determine compliancy and report results and evaluates products and various aspects of system administration. Conducts security program audits and develops solutions to lessen identified risks. Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements. Provides assistance in computer incident investigations. Performs vulnerability assessments including development of risk mitigation strategies.

Requirements

5 years with BS/BA; 3 years with MS/MA; 0 years with PhD
Must be a U. S Citizen
Must be able to obtain a Public Trust clearance
Must have experience with EMASS
Must be Security + Certified or have Certified Info System Security Professonal CISS
Knowledge of DoD 8570 IAT Level II certification (s) (i.e., CISSP, CISM)
Extensive knowledge and experience with information security standards, policies and practices – NIST SP 800-53 rev4, SP 800-37 rev2, FIPS-199, NIST 800-171
Demonstrated experience writing information system security documentation (System Security Plans (SSP), Plans of Action and Milestones (POA&Ms)).
Experience using vulnerability assessment tools (NESSUS, ACAS) and analyzing results

Nice To Haves

RMF (Risk Management Framework) Process, STIG Scans, IA Requirements

Responsibilities

Provides technical and programmatic information assurance services to internal and external customers in support of network and information security systems.
Designs, develops, and implements security requirements within an organization’s business processes.
Prepares documentation from information obtained from customer using accepted guidelines.
Prepares security test and evaluation plans.
Provides certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments.
Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps.
Recommends system enhancements to improve security deficiencies.
Develops, tests, and integrates computer and network security tools.
Secures system configurations and installs security tools, scans systems to determine compliancy and report results and evaluates products and various aspects of system administration.
Conducts security program audits and develops solutions to lessen identified risks.
Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.
Provides assistance in computer incident investigations.
Performs vulnerability assessments including development of risk mitigation strategies.