Location: 100% Remote

Years’ Experience: 4

Education: Bachelors Degree in IT or Cybersecurity related field

Clearance: Must be able to obtain and maintain a Secret Clearance

Work Authorization: Must be a United States Citizen

Key Skills:

• SDoD8750 security related certification (ie. CompTIA Security ) a bonus
• Must have RMF and A&A experience (Navy RMF preferred)
• Understanding of CI/CD pipeline and experience with DevSecOps implementation a bonus
• Experience with AWS and Salesforce a bonus

Responsibilities

• Collaborate with customers and internal engineering teams to lead required RMF process/steps to assess and authorize a system obtaining and maintaining a full ATO (Authority to Operate).
• Assist the customer with authorizing a=Assessment and Authorization (A&A) documentation.
• Support writing and reviewing of Risk Management Framework (RMF) documentation packages to support risk assessments.
• Design and execute the security testing plan of all requirements and analysis required to complete a RMF package document for submittal and approval.
• Knowledge of web application security, mobile application security, and DoD RMF processes, procedures, governance.
• Knowledge of Cybersecurity, Network, Systems, and Software Engineering best practices
• Experience with DoD eMASS, STIGs, and SRGs.
• Be proficient with vulnerability scanning tools and frameworks to evaluate the security posture of a system.
• Assist the customer in preparing training conferences, exercises, and video teleconferences to meet annual IA training objectives.
• Have technical understanding of cloud technologies (i.e., AWS and Salesforce) and their implementation within the customer’s network environments.
• Other duties as assigned.

Qualifications

• Experience with requirements analysis, architect, design, and documentation development of cybersecurity and information security solutions
• Experience leading RMF for IATT/ATO activities involving custom on-prem and cloud solutions is a bonus.
• Experience performing vulnerability risk analysis on the deficiencies found during DIACAP/RMF testing.
• Experience with Information Assurance/Cybersecurity tools and scanners used to evaluate the security posture of the system/enclave (preferred tool experience: Palo Alto Prisma Cloud, Fortify, AWS Inspector, BurpSuite, ZAP)
• Experience as a Navy Qualified Validator (NQV) Level III validator is a bonus.

About Sparibis

Sparibis LLC is a professional solution firm that Clients rely on to access the best talent to drive their business success.

Sparibis is an equal opportunity employer that values diversity at all levels. All individuals, regardless of personal characteristics, are encouraged to apply.