What are the responsibilities and job description for the Security / ATO Specialist position at Promantus, Inc?
Hi Job Seekers,
This is Aarif, Technical Recruiter from Promantus.
We have multiple exciting job opportunities open across technologies. Kindly review the job details below and share suitable profiles / your updated resume if interested.
Security Specialist / ATO Specialist
Location:Washington, DC - Remote /Hybrid
Duration: 12 Month
Position Summary
EEOC is seeking support to build AI-enabled applications, analytics solutions, and data products within its existing Unified Data Analytics Platform and Microsoft Azure environment. The contractor will extend EEOC’s existing AI Assistant and LLM to additional data and document sets; it will not rebuild or replace the existing platform.
The Security / ATO Specialist will ensure that the applications and data products developed under the project comply with Federal security, privacy, access-control, and Authority to Operate requirements. The role will support NIST controls, security documentation, vulnerability testing, access controls, audit logging, and protection of sensitive EEOC case information and personally identifiable information.
Roles and Responsibilities
• Support Federal ATO and Risk Management Framework activities.
• Prepare System Security Plan, security-assessment, and POA&M inputs.
• Support implementation of applicable NIST SP 800-53 controls.
• Review cloud security, identity management, access controls, and audit logging.
• Support role-based access, row-level security, and field-level data masking.
• Support penetration-test preparation and remediation.
• Ensure appropriate handling and protection of PII and sensitive Government information.
• Coordinate security requirements and findings with EEOC and the project team.
Mandatory Requirements
• Bachelor’s degree or equivalent relevant experience.
• Minimum five years of information-security experience.
• Demonstrated Federal ATO and RMF experience.
• Knowledge of NIST RMF and NIST SP 800-53.
• Experience preparing SSP, assessment, and POA&M documentation.
• Experience with cloud security, access controls, and audit logging.
• Experience supporting vulnerability assessments or penetration-test remediation.
• Ability to obtain and maintain the suitability or background-investigation level required by EEOC.
Suitability, Background Investigation, and Access Requirements
The candidate will be required to:
• Obtain and maintain the suitability or background-investigation approval specified by EEOC.
• Complete the Government’s required identity-verification and credentialing process once defined.
• Sign the required Non-Disclosure Agreement.
• Complete applicable EEOC security and privacy training.
• Comply with EEOC access-control, privacy, and data-handling requirements.
• Receive Government approval before accessing sensitive EEOC systems or data.
Thanks
Aarif