Similar available jobs
in Bethesda, MD
Creates cyber-intelligence tools / methods and performs research and analysis in order to mitigate and eliminate data and cyber security risks. Designs and develops acceptance criteria for cyber security architecture.
Job Responsibilities
- Execute all steps of the Risk Management Framework (RMF) based upon NIST SP 800-37, Rev. 2
- Implement and assess NIST SP 800-53 controls and apply overlays as needed
- Synthesize analytical data to develop security-related documents such as System Security Plan (SSP), Configuration Management Plan (CMP), Contingency Plan (CP), Incident Response Plan (IRP), Business Impact Analysis (BIA), and Privacy Impact Assessment (PIA)
- Facilitate and lead discussions with stakeholders to ensure all security-related documents are accurate and up-to-date
- Ensure compliance with Governance, Risk and Compliance (GRC) and A&A standards and guidelines
Minimum Qualifications
Bachelor's Degree in Computer Science or a related field or equivalent experience.
Relevant Work Experience:
- 5-10 years of experience in systems security.
- 1-3+ years of experience supporting Governance, Risk and Compliance (GRC), Assessment and Authorization (A&A), and Policy Framework Support
- Strong understanding of the Risk Management Framework (RMF) based upon NIST SP 800-37, Rev. 2, and experience implementing/assessing NIST SP 800-53 controls
- Strong oral and written communication skills
- One or more of the following certifications: Security+, CAP, GSEC, GSLC, CISM, CISA, CISSP
Other Job Specific Skills
* Must be able to communicate effectively and clearly present technical approaches and findings.
*Exercises a limited degree of latitude in determining technical objectives of assignments.
* Excellent attention to detail.
* Must be able to balance multiple tasks simultaneously.
* Advanced knowledge of encryption, vulnerability assessment, penetration testing, cyber forensics, intrusion detection, and incident response and remediation.
#CJPOST