Information Security Risk Specialist, Senior
About The Position
Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an Information Security Risk Specialist to help break down complex threats into manageable plans of action. This is your opportunity to build experience in a strategic information security role while developing skills in AI, cloud computing, and cyber risk analysis. Join us. The world can’t wait.
Requirements
- Experience implementing information assurance or cybersecurity processes and policies
- Experience managing and administering Assured Compliance Assessment Solution (ACAS) and Host-Based Security System (HBSS)
- Experience utilizing the Enterprise Mission Assurance Support Service (eMASS) to address security controls, create POA&Ms, and upload artifacts such as STIG checklists or ACAS scans
- Experience supporting system security and authorization processes across multiple platforms, environments, or Impact Levels
- Experience reviewing vulnerability documentation and writing Residual Risk statements
- Experience reporting IT security events or incidents based on policies and procedures
- Secret clearance
- HS diploma or GED
Nice To Haves
- Experience serving as an Information Systems Security Officer (ISSO)
- Knowledge of Cloud-based infrastructure and DevSecOps principles and practices
- Knowledge of security tools such as Microsoft Intune, Microsoft Defender, or other similar security tools
- Ability to use and operate security tools, including Tenable Nessus, SecurityCenter, IBM Guardium, HP WebInspect, or Network Mapper
- Ability to meet DoW 8140 requirements
Responsibilities
- Address security controls
- Create POA&Ms
- Upload artifacts such as STIG checklists or ACAS scans
- Support system security and authorization processes across multiple platforms, environments, or Impact Levels
- Review vulnerability documentation
- Write Residual Risk statements
- Report IT security events or incidents based on policies and procedures
Benefits
- health, life, disability, financial, and retirement benefits
- paid leave
- professional development
- tuition assistance
- work-life programs
- dependent care
- recognition awards program
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
High school or GED
