**This position is contingent on contract award**Description: Responsible for assisting in identifying the overall security requirements for theprotection of data, to ensure the implementation of appropriate information security controls, and perform and analyze the security risk assessment, risk analysis, risk management process, security control assessments, and awareness activities for systems and networking operations. Provide assistance to ensure Cybersecurity functions are included in the configuration management process. Interact with customers, Information Technology (IT) staff, and high-level corporate officers indefining and achieving required Cybersecurity objectives for the organization. Contribute to building security architecture. Assist with the integration of legacy systems. Contribute to the acquisition/RDT&E environment andbuilding Cybersecurity into systems deployed in operational environments. Prepare security authorizationdocumentation.
Capabilities: - Perform security planning, security assessment, risk analysis, risk assessment, and riskmanagement support activities
- Perform risk assessment and management to support integration of legacy systems into existingIT environment
- Review and analyze Cybersecurity built into systems to be deployed to operationalenvironments
- Prepare risk assessment, plan of actions, authorization recommendations, and related security authorization documentation
- Identify and support overall security requirements for the protection of data to ensure the implementation of information security policies, activities, and controls
- Ensure Cybersecurity functions are included in the development and risk management process,particularly those focusing on infrastructure protection and defensive IT strategy
- Facilitate interaction with customers, IT staff, and high-level corporate officers to assist in defining and achieving required risk management objectives for the organization
- Support integration of legacy systems within respective IT environment.
Qualifications:- Eight (8) years of experience as an IT Risk Assessor, System Security Engineer, InformationSystems Security Manager or DAO in programs and contracts of similar scope, type and complexity is required.
- A Bachelors Degree in Computer Science or IT Engineering. In lieu of a Bachelors degree,an additional four (4) years of experience for a total of twelve (12) years.
- Working knowledge of the following is required: system security design process, defense-indepth/breadth, engineering life cycle, information domains, cross-domain solutions, controlledinterfaces, identification, authentication and authorization, system integration, ICD 503 (formerlyNISCAP), risk management, intrusion detection, contingency planning, incident handling, configuration control, change management, auditing, security authorization process, principles of Cybersecurity (confidentiality, integrity, non-repudiation, availability, access control), and security testing.
- Position requires an ACTIVE TS/SCI with Full Scope Polygraph Clearance
**This position is contingent on contract award**
Columbia Technology Partners is an Equal Opportunity Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. Our EEO policy reflects our commitment to ensure equality and promote diversity and inclusion in the workplace. Our policy applies to all employees, job candidates, contractors, stakeholders, partners, and visitors.
Powered by JazzHR