Position Overview / Job Duties:

Edgesource is seeking a Program Manager to support an IC customer for Systems Engineering Technical Assistance (SETA) and supporting mission-driven Information Technology, Infrastructure Solutions and Services, and Commodity Support. The program will be responsible for operating and maintaining mission critical CT IT applications and systems, while rapidly enhancing IT capabilities. The contract will be responsible for system integration across customer development and O&M activities, providing analysis and engineering services in a consulting capacity, working closely with the customer to translate operational requirements into configured systems, integrating the technical inputs of the entire design team, managing interfaces, characterizing and managing technical risk, transitioning technology from the technology base into program specific efforts, and verifying that designs meet operational needs. 

The Cyber Security Analyst will support the customer in programmatic assessment and ensuring protection of the confidentiality, integrity, and availability of customer systems, networks, and data against cyber-attacks or unauthorized access. The candidate will be responsible for:

• Provide cybersecurity support to the customer cybersecurity PM for ICD 503 assessment & authorization for information systems, applications, software programs and change management procedures
• Provide continuous monitoring oversight and integration for authorize information systems utilizing the change management process
• Identify ICD 503 National Institute of Standards & Technology (NIST) and Committee on National Security Systems Instruction (CNSSI) security requirements for security relevant changes to authorized systems or applications
• Review and assess systems and applications using the RMF workflows and tools for systems ATO per ICD 503
• Review systems security posture and plan of action and milestones (POA&Ms) to facilitate arborization workflows with appropriate authorizing element
•  Provide systems security categorization support to the government PM
• Provide CNSSI-1253 security controls support for information systems, security relevant changes on existing and new information systems
• Provide information systems security guidance as needed pertaining to the ICD 503 risk management throughout system design lifecycle workflow to achieve authorization approval and POA&M management
• Provide support to the government PM in determining common controls which are inherited from the infrastructure
• Review and recommend changes to cybersecurity and zero trust approach throughout the development lifecycle. Assist product development teams with the Assessment & Authorization process
• Assist development and O&M teams on options for security controls to meet requirements and independent assistance with the A&A process

Required Qualifications:

• Must have active TS/SCI FSP Poly
• Candidate must have 6-8 years of relevant experience
• Experience with A&A processes, ATO requirements, and SCA/AO requirements
• Experience with DevSecOps and agile development
• Proven work experience in cybersecurity engineering
• Experience working with cloud (AWS, Azure) and other virtual machines
• Experience using Tableau, SharePoint, JIRA, & Confluence
• Familiarity with ICD 503, NIST, and CNSSI cyber policies and RMF

Desired Qualifications (NOT REQUIRED):

• Working collaboratively in a team environment
• Experience across the program life cycle (requirements, design, implementation, test, and sustainment)
• Program Management Professional (PMP) certification
• Enterprise Architecture certification (TOGAF)
• Bachelors or Masters degree