Overview

Provide cyber security support for information systems, from Assessment and Authorization through Operations and Maintenance. This includes applying Risk Management Framework expertise and supporting developers and engineers in maintaining Authority to Operate compliance for information systems.

Responsibilities

• Support the assessment and authorization by applying expert-level knowledge of NIST SP 800-53 (Revision 4 and Revision 5).
• Draft security documentation, including Plan of Actions and Milestones (POA&Ms), System Security Plans (SSPs), and other designated artifacts for the Body of Evidence (BOE).
• Participate in project review meetings and provide technical cyber security guidance.
• Refine, edit, and maintain training materials, including maintenance of a small training/demonstration network, execute training class.
• concerning malicious code threats and assist in preparation of a daily report to senior management on the current status of a threat and ability to counteract that threat.
• Write reports for Sponsor on the detailed technical analysis results.
• Communicate complex technical concepts and project information clearly and concisely to technical and non-technical audiences, write technical documents addressing intricate, sensitive issues.
• Identify new technologies and assess their technical and performance characteristics.
• Display knowledge of computing design concepts and implementation.
• Possess strong interpersonal, organizational, writing, communications, analytical and briefing skills.
• Possess knowledge of encryption technologies, identity and authentication technologies, Information Assurance assessment tools, Lotus Notes, Microsoft Office and Network Defense monitoring tools and systems.
• Possess experience with cloud computing, including Amazon Web Services.