Information Assurance

Bespoke Technologies•Bethesda, MD

About The Position

The Information Assurance SME supports a large customer organization in the National Security Group. The role serves as the customer’s subject matter expert for cybersecurity questions and concerns, translating cybersecurity needs and capabilities into requirements and detailed technical solutions. The position contributes to cybersecurity policy and develops baseline security requirements for common enterprise services to support compliance with cybersecurity directives and policies. The role supports Authority to Operate (ATO) activities, assesses programs’ ability to attain an ATO, and provides security guidance and recommendations. It also addresses cybersecurity architecture needs, dependencies, risks, and mitigation plans; analyzes best practices to identify gaps and opportunities for improvement; and develops security requirements and constraints for technical documents such as architectural artifacts, business cases, and concepts of operations. The position is based in Bethesda, Maryland, and requires an active Poly clearance. Familiarity with microelectronics is also noted.

Requirements

Active Poly clearance; applicants without one will not be considered.
Typically, a bachelor's degree and 12–15 years of relevant experience; experience may be exchanged for degree requirements.
Experience in the cybersecurity responsibility areas listed in the posting.
Detail-oriented, with the ability to consistently provide concise, thorough, accurate, high-quality work products.
Ability to adapt to shifts in customer priorities.
Expert knowledge of the ATO process.
Experience partnering across the Intelligence Community (IC).
Experience in risk management.
Solid background in network security and experience deploying tools to various networks.
Firm understanding of cybersecurity requirements across the IC.

Nice To Haves

Familiarity with microelectronics.

Responsibilities

Respond to congressional inquiries on cybersecurity issues.
Translate cybersecurity needs and capabilities into requirements and detailed technical solutions.
Develop and maintain a list of cybersecurity architecture needs, dependencies, risks, and mitigation plans.
Analyze cybersecurity best practices to identify gaps and improvement opportunities.
Contribute input to cybersecurity policies.
Develop and publish baseline security requirements for common enterprise services to ensure compliance with cybersecurity directives and policies.
Conduct critical path analysis, risk analysis, and task dependency analysis.
Develop security requirements and constraints for foundational technical documents, including program architectural artifacts, business cases, and concepts of operations.
Assist with the Authority to Operate (ATO) process.
Assess a program’s ability to attain an ATO.
Provide guidance and recommendations on security-related issues.
Diagram interim and future architectures for ICAM implementation.
Define and communicate ATO integration expectations for all IT services.
Work with service providers to ensure systems are integrable.
Act as the subject matter expert for customer cybersecurity questions and concerns.
Assist in areas outside cybersecurity as necessary.