The successful hire will plan, prepare, validate, document, implement and coordinate Information Assurance (IA) Vulnerability Management, as well as Certification and Accreditation (C&A) activities (e.g., Risk Management Framework) for our Navy client. This position is hybrid and requires frequent attendance onsite at the Moorestown, NJ site.
- Provide C&A and Security Test and Evaluation support of IT components systems, networks, circuits, hardware, and software.
- Explore, recommend, and document new concepts, tools, and technical methodologies in support of Cybersecurity (CS) solutions.
- Prepare white papers and presentation documentation to articulate solutions to CS problems.
- Assist in the preparation and maintenance of security accreditation documentation prepared in accordance with applicable DoD policy guidelines.
- Advise and assist in accomplishing CS best practices applicable to all components of the command IT solution in accordance with customer policy and guidelines.
- Assist in command level CS policy and procedures development.
- Provide customer with CS SME liaison support between command level CS personnel.
- Support the customer in fielding CS questions, conduct the necessary research to provide answers and recommend methods to facilitate and broaden IA awareness including collaboration techniques.
- Assist with the analysis of newly promulgated guidance to determine the impact on CS operational requirements and recommend resulting revisions to existing CS procedures/policy/guidance.
- Inform, interpret, and apply IA policy releases to support customer maintenance of CS Standard Operating Procedures for Guidebook and SharePoint collaboration releases.
- Provide support for Information Technology Contingency Plan (ITCP) documentation creation & updates and associated annual ITCP Test exercise requirements.
- Serve as the Alternate Information System Security Officer (AISSO) for AEGIS TECHREP.
- Bachelor's degree in Computer Science or Computer Information Security (or similar).
- Three plus years' related experience. Related experience should include aspects of the following: understanding of CS best practices and procedures; knowledge of current CS tools available; hardware/software CS implementation; communication protocols; Public Key Infrastructure and encryption techniques; familiarity with commercial products, and current Internet technology.
- Ability to understand and implement technical vulnerability remediation in response to Assured Compliance Assessment Solution (ACAS) Scans and Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) SRR Scans, based on prior work experience.
- Demonstrable understanding and prior use of DoD CS and security concepts, practices, and procedures.
- Understanding of sensitive unclassified and classified information.
- Working knowledge of DoD Directives to include 8500.1, as well as DISA STIG based on prior work experience or education.
- Three plus years' experience in performing IT security assessments involving system and enclave policy protections.
- Three plus years experience in preparing and implementing C&A policies and procedures.
- Basic office administration and organizational skills as well as working knowledge of the Microsoft Windows Office products.
- Excellent written and verbal communication skills required.
- Ability to oversee and integrate all aspects of system documentation and related CS elements.
- Ability to assess CS impact to the overall IT program or platform and determine best vulnerability mitigation requirements.
- Familiarity with following tools: Enterprise Mission Assurance Support Service (eMASS), Vulnerability Remediation Asset Manager (VRAM), and eMASSTER a plus.
- ISSO experience desired but not required.
Certificates, Licenses, Registrations
- CompTia Security+ or comparable (DoD 8570.1M, or superseded DoD manual, IAM/IAT Level II certification).
- Must be able to obtain the Navy Qualified Validator certification within six months of pending NAVSEA wait time in accordance with DoDI 8510.01.
Qualifications
- Must have an active Top-Secret clearance.
- Must be a U.S. citizen.
- Must maintain the capacity to communicate with their supervisor and/or manager when not in the office.