Responsibilities: Serves as an independent and objective assessor and extension of the Navy SCA. Assists with the development and execute Security Assessment Plans (SAP). Validates security control implementation through on-site and in-person testing examination and interviews in support of Risk Assessments and Annual Security Reviews. Independently reviews system configurations to determine compliance with applicable STIGs and SRG. Ensures traceability exists between supporting artifacts. Verifies that all vulnerabilities from raw assessment results are properly documented in the systems eMASS POA&M. Provides a summary of non-compliant security controls in Risk Assessment tab in eMASS in accordance with Navy SCA Risk Assessment Guide and the SCA. Prepares Security Assessment Report (SAR) and SAR Executive Summary based on assessment results and in accordance with SOPs. Provides risk assessment related technical consultations to Program Managers Information System Owners Information System Security Engineers (ISSE) and ISSOs.
Education: Bachelors degree in computer science information technology communications systems management or an equivalent science technology engineering & mathematics (STEM) degree from an accredited institution as recognized by the U.S. Department of Education.
Experience: Ten (10) years practical experience in a cybersecurity or A&A related field. Experience should include implementing and/or reviewing RMF lifecycle documentation; ensuring/validating the confidentiality integrity and availability of systems networks and information; and conducting risk and vulnerability reviews and assessments to ensure accreditation procedures were followed and documenting non-compliance.
Required Certification: Must possess Navy Qualified Validator Certification from the Navy Certification Authority (CA). Must possess CCNA-Security CySA GICSP GSEC Security CE CND or SSCP.
Other: An Active Secret Security Clearance is required.
Benefits Information: We offer a generous benefits package including a 401k with employer match. Full time employees are also eligible for family medical dental and vision benefits; as well as ancillary benefits including life and accidental death and dismemberment insurance; short- and long-term disability; flexible spending accounts; long-term care insurance; and accident hospital and critical illness insurance. Full-time employees are also eligible for 2 weeks vacation leave accrual per year (this accrual increase as tenure with company increases) 7 days sick leave and 11 paid holidays with additional leave time available for bereavement jury duty and military training days throughout the year.
Responsibilities: Serves as an independent and objective assessor and extension of the Navy SCA. Assists with the development and execute Security Assessment Plans (SAP). Validates security control implementation through on-site and in-person testing examination and interviews in support of Risk Ass...
Responsibilities: Serves as an independent and objective assessor and extension of the Navy SCA. Assists with the development and execute Security Assessment Plans (SAP). Validates security control implementation through on-site and in-person testing examination and interviews in support of Risk Assessments and Annual Security Reviews. Independently reviews system configurations to determine compliance with applicable STIGs and SRG. Ensures traceability exists between supporting artifacts. Verifies that all vulnerabilities from raw assessment results are properly documented in the systems eMASS POA&M. Provides a summary of non-compliant security controls in Risk Assessment tab in eMASS in accordance with Navy SCA Risk Assessment Guide and the SCA. Prepares Security Assessment Report (SAR) and SAR Executive Summary based on assessment results and in accordance with SOPs. Provides risk assessment related technical consultations to Program Managers Information System Owners Information System Security Engineers (ISSE) and ISSOs.
Education: Bachelors degree in computer science information technology communications systems management or an equivalent science technology engineering & mathematics (STEM) degree from an accredited institution as recognized by the U.S. Department of Education.
Experience: Ten (10) years practical experience in a cybersecurity or A&A related field. Experience should include implementing and/or reviewing RMF lifecycle documentation; ensuring/validating the confidentiality integrity and availability of systems networks and information; and conducting risk and vulnerability reviews and assessments to ensure accreditation procedures were followed and documenting non-compliance.
Required Certification: Must possess Navy Qualified Validator Certification from the Navy Certification Authority (CA). Must possess CCNA-Security CySA GICSP GSEC Security CE CND or SSCP.
Other: An Active Secret Security Clearance is required.
Benefits Information: We offer a generous benefits package including a 401k with employer match. Full time employees are also eligible for family medical dental and vision benefits; as well as ancillary benefits including life and accidental death and dismemberment insurance; short- and long-term disability; flexible spending accounts; long-term care insurance; and accident hospital and critical illness insurance. Full-time employees are also eligible for 2 weeks vacation leave accrual per year (this accrual increase as tenure with company increases) 7 days sick leave and 11 paid holidays with additional leave time available for bereavement jury duty and military training days throughout the year.
View more
View less