Information Assurance Specialist

Edgewater Federal Solutions, Inc.•Washington, DC

1d•Onsite

About The Position

Edgewater is currently looking for an Information Assurance Specialist to support a federal customer in the Washington DC area. The Information Assurance Specialist utilizes knowledge of Federal sector security processes, hardening of systems, and is essential to the team in managing projects in Azure DevOps, applying Scrum principles and practices to remove impediments and deliver value and foster a collaborative environment.

Requirements

Bachelor’s degree or equivalent work experience in related field.
Experience with leading daily scrums, sprint planning and facilitating the scrum process.
Sound cyber security knowledge foundation, to include understanding of Computer and network technology fundamentals.
Strong familiarity with NIST Security Controls (NIST 800-53).
Experience with security tools in an enterprise environment to include installation, configuration, usage, and troubleshooting.
Demonstrate security expertise with multiple Windows, and Unix-based operating systems.
Excellent verbal and written communication skills and ability to build strong relationships with stakeholders at all levels.
Strong problem-solving capabilities and the ability to effectively communicate solutions.
Strong analytical capabilities.
Strong understanding of how computer systems and networks are secured and in compliance with government and industry regulations.
Ability to independently collect, review, and evaluate IT product data to identify and characterize security threat sources of concern and provide recommendations to Government leadership.

Nice To Haves

Experience with government contracting firms supporting the Federal government.
Experience with Cloud providers preferably Azure.
Scrum Master certification.
Familiar with using agile tools for day-to-day tasking preferably Azure Dev Ops.
3-5 years of relevant work experience with network engineering and/or system administration background (Unix/Linux/Windows).
Experience with ServiceNow.
Some experience with Change Management and/or ITIL certified.
Respond to service requests and support change management security review process.
Subject matter expertise in information security best practices.
Ability to articulate ideas to both technical and non-technical audiences through excellent written and oral communication skills.
The ability to establish effective relationships with internal partners and teams.

Responsibilities

Researches, organizes, writes, edits, trains, and produces technical data, guidelines, templates, and policy to support Security Engineering.
Perform information security risk assessments across a variety of platforms and applications submitted through the Change Management process.
Guide users in determining and integrating baseline security requirements, advise on viability of alternative approaches and conduct and evaluate feasibility studies.
Propose remediation/mitigating controls and recommendations to stakeholders and management to minimize risk.
Address security concerns or issues with proposed software and hardware projects to ensure “baked-in” security considerations in project proposals.
Lead security team engagements to build and mature processes to produce written Standard Operating Procedures with a focus on improvement to FERC’s Information Assurance processes, methodologies, and communication methods.
Support iterative review of security assessment results and work with stakeholders across organizations to provide structure around risk management and internal controls.
Experience with CIS Benchmarks and DISA STIGs to provide system hardening guidance.
Maintain a Master Library of Security Benchmarks for relevant systems as a reference for essential baseline security requirements, compliance and continuous monitoring capabilities.
Provide status updates and follow-up on active open Security Engineering tickets.
Align with and support the execution of the Cybersecurity Information Assurance organization vision and strategy.
Development of security guidance, policies, and procedures.
Ability to obtain a Public Trust clearance.
Other duties as assigned.