Overview

NCI is a leading provider of enterprise solutions and services to U.S. defense, intelligence, health and civilian government agencies. NCI's AI solution, Shai(tm), scales humans with artificial intelligence by empowering the workforce to meet their mission by using best in class AI solutions coupled with our exceptional service offerings. Working with strategic partners, NCI is committed to bringing commercial innovation to missions of national importance. NCI is a mid-tier systems integrator headquartered in Reston, VA, and operates at locations across the globe.

NCI has been designated a 2020 Military Friendly Employer by MilitaryFriendly.com

Responsibilities

Essential Job Functions:

• Assesses DoD Information Systems against the RMF security controls IAW DoDI 8500, DoDI 8510, CNSSI 1253, and NIST SP 800-53
• Develops, author’s, and reviews documentation for compliance including Configuration Management Plans, Network Infrastructure Plans, Business Continuity and Disaster Recovery Plans, and all supporting processes, procedures, and policies in support of RMF A&A activities
• Effectively performs interviews of technical Subject Matter Experts (SMEs) as well as non-technical management personnel to ascertain the security posture of an IT system
• Identifies mitigating factors for identified risks and proposes additional mitigation strategies for identified vulnerabilities
• Evaluates a wide array of IT devices for Security Technical Implementation Guide (STIG) compliance using ACAS/ Nessus, SCAP Compliance Checker, and manual checklist reviews. This includes Windows, Solaris, and Red Hat Linux servers and desktops, routers, switches, firewalls, IDS, etc. 
• Applies STIGs to a variety of devices to ensure compliance
• Assist system owners with all self-assessment required tasks

Qualifications

Minimum Requirements:

• IAT III - CISSP or CASP required (CISSP preferred)
• Bachelor's degree from an accredited university in Computer Science, Information Technology, or related field.
• Current/active Secret clearance
• 7-12 years of related experience in the fields of security engineering, cyber security, or Information Assurance
• Experience with eMASS and a strong understanding of the CNSSI 1253 CCIs

PREFERRED EDUCATION AND EXPERIENCE:

• Additional Computing environment certification preferred (MCITP, CCNA, CCSP, CEH, etc)

This position requires the ability to perform the below essential functions:

• Sitting for long periods
• Standing for long periods
• Ambulate throughout an office
• Ambulate between several buildings
• Stoop, kneel, crouch, or crawl as required
• Repeatedly lift and carry weight up to 15 pounds