Why this role stands out
This hybrid role offers a fantastic opportunity to grow your expertise in information assurance and cybersecurity, contributing to critical security initiatives within a reputable company. You'll thrive here if you possess strong analytical skills, a knack for problem-solving, and a drive to protect sensitive data, all while enjoying the flexibility of a hybrid work environment.
Quick overview
Job description
Job Description: Requires skills to assess, plan, and enact security measures to help protect an organization from security breaches and attacks on its computer networks and systems. Be able to identify vulnerabilities, interpret the test results of commonly used software to help protect the organization's data, and help users adhere to new regulations and processes to ensure the network stays safe. Work as an intricate part of an IT department for various organizations. Capacity to use critical thinking with excellent attention to details to find new ways to resolve issues.
Possess the ingenuity to find new ways to improve current systems and networks within the organization. The CSA is to provide technical analysis for IA/CS support and integration efforts. The CSA will perform in-depth analysis in various areas and technologies for RMF Assessment and Authorization (A&A)
- Reviews, updates, validates and authors Cybersecurity procedures (SOPs) as required.
- Reviews and maintains an inventory of authorized software.
- Reviews and maintains an inventory authorized external (USB) devices and media.
- Audits and validates configurations deployed on laptops, workstations, and servers.
- Audits and validates configurations of network devices based on DISA STIGs.
- Provides monitoring, and analysis of laptop, workstation, server and network audit logs.
- Ensures AV is properly deployed, and current signatures are implemented across the laptops, workstations and servers.
- Monitors, reviews and reports on data restoration capabilities.
- Familiar with HBSS and ACAS from a compliance and reporting perspective.
- VRAM management on unclassified and classified networks (two security domains)
- Basic system knowledge including ability to upload scan data.
- Reports compliance for Cyber directives including IAVs, TASKORDs, FRAGORDs, etc.
- Create, implement and maintain system baselines.
- Conduct technical security test and evaluations of unclassified networks and/or systems to determine compliance with appropriate information assurance (IA) or cyber security controls and risk mitigation strategy.
- Provide detailed risk mitigation recommendations; conduct risk and vulnerability assessment of IT systems; conduct appropriate network scans utilizing ACAS and coordinate patching as required to gain/maintain accreditation.
- Prepare Certification and Accreditation/Assessment and Authorization documentation packages in accordance with RMF.
- Knowledge of DIACAP/RMF/NESSUS /RETINA Knowledge of MS Visio Required Skills and Experience:
- 10+ years of directly related experience in IT/IA Engineering OR Bachelor's degree in related discipline with 8+ years of equivalent experience
- Must meet the DoD 8570 standard for an IAM 3
- CISSP certification required
- Must be a U.S. citizen
- A Top secret security clearance Degree Requirements:
- Bachelor's degree and a minimum of 8 years of relevant experience. OR 10 years of experience.
Similar jobs
- SG

Detection EngineerNew
S&P Global · New York, NY · Hybrid 🇺🇸
Engineering$140k - $155k/yr13 hours ago - BA

Information Security Risk SpecialistNew
BOOZ, ALLEN & HAMILTON, INC. · Oklahoma City, OK · On-site 🇺🇸
Administrative$99k - $225k/yr13 hours ago - BA

System Security Engineer
BOOZ, ALLEN & HAMILTON, INC. · McLean, VA · On-site 🇺🇸
ConfluenceJiraTechnology$69.4k - $158k/yr4 weeks ago - LT

Senior Specialist, Industrial Security (CSSO)New
L3Harris Technologies · Rochester, New York · Hybrid 🇺🇸
Background ChecksCompliance$76.5k - $141.5k/yr2 hours ago - AI

Staff Product Security EngineerNew Auto Apply
Airwallex · US - San Francisco · Hybrid 🇺🇸
GCPGoogle WorkspaceSplunk+9TechnologySalary not listed11 hours ago - MO

Security Engineer, Device/HardwareNew Auto Apply
Motive · Hybrid - Austin · Hybrid 🇺🇸
Embedded SystemsC++IoT+2TechnologySalary not listed12 hours ago - RA

Sr. Security EngineerNew Auto Apply
Rainmaker · El Segundo · Hybrid 🇺🇸
OnboardingGoogle WorkspaceGit+7TechnologySalary not listed7 hours ago - TS
Senior Vulnerability ResearcherNew Auto Apply
Two Six Technologies · Dayton · Hybrid 🇺🇸
5GEmbedded SystemsTCP/IP+4TechnologySalary not listed11 hours ago - TS
Lead Vulnerability ResearcherNew Auto Apply
Two Six Technologies · Dayton · Hybrid 🇺🇸
5GTCP/IPAssembly+1TechnologySalary not listed11 hours ago - MR
Sr. Security EngineerNew Auto Apply
Make Rain · El Segundo · On-site 🇺🇸
Technology$128k - $225k/yr7 hours ago - LT

Experienced, Cyber IntelligenceNew
L3Harris Technologies · Northampton, Massachusetts · On-site 🇺🇸
EncryptionAccount ManagementAuditing+2Technology$92.5k - $171.5k/yr5 hours ago - LT

Sr. Associate, Cyber Infrastructure Systems Engineer - Systems AdministratorNew
L3Harris Technologies · Colorado Springs, Colorado · Hybrid 🇺🇸
DockerMicroservicesVMware+2Technology$70.5k - $130.5k/yr5 hours ago
