Job Summary:

Provide advisory services to the CISO on security assessments and audits. Update and improve the plans, processes, procedures, and content on an as required basis to obtain the reportable data required to meet OMB, DHS and CISA security requirements. Help develop continuous risk identification and mitigation strategies. Subject Matter Expert (SME) applying and implementing NIST SP 800 series and OMB guidance.

Job Duties:

• Analyze and report organizational security posture trends
• Analyze and report system security posture trends
• Apply security policies to meet security objectives of the system
• Assess adequate access controls based on principles of least privilege and need-to-know
• Assess all the configuration management (change configuration/release management) processes
• Assess the effectiveness of security controls
• Develop procedures and test fail-over for system operations transfer to an alternate site based on system availability requirements
• Ensure all systems security operations and maintenance activities are properly documented and updated as necessary
• Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level
• Implement security measures to resolve vulnerabilities, mitigate risks and recommend security changes to system or system components as needed
• Implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation
• Mitigate/correct security deficiencies identified during security/certification testing and/or recommend risk acceptance for the appropriate senior leader or authorized representative
• Plan and recommend modifications or adjustments based on exercise results or system environment
• Properly document all systems security implementation, operations and maintenance activities and update as necessary
• Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities
• Verify and update security documentation reflecting the application/system security design features
• Verify minimum security requirements are in place for all applications
• Resource must be able to be on site 4 days of the week during transition with opportunity to change frequency depending on team need after transition.

Basic Qualifications:

• Bachelors degree or equivalent combination of education and work experience
• Secret clearance required

Preferred Qualifications:

• Minimum 0-2 years of experience analyzing and reporting system security posture trends

Job Type: Full-time

Pay: From $80,000.00 per year

Benefits:

• 401(k) matching
• Dental insurance
• Flexible schedule
• Health insurance
• Paid time off
• Parental leave
• Professional development assistance
• Referral program
• Vision insurance
• Work from home

Experience level:

• 2 years

Shift:

• Morning shift

Weekly day range:

• Monday to Friday

Work setting:

• Hybrid remote

Work Location: Hybrid remote in Arlington, VA 22203