Information Assurance Specialist

Responsibilities

Researches, organizes, writes, edits, trains, and produces technical data, guidelines, templates, and policy to support Security Engineering. 

Perform information security risk assessments across a variety of platforms and applications submitted through the Change Management process.  

Guide users in determining and integrating baseline security requirements, advise on viability of alternative approaches and conduct and evaluate feasibility studies. 

Propose remediation/mitigating controls and recommendations to stakeholders and management to minimize risk. 

Address security concerns or issues with proposed software and hardware projects to ensure “baked-in” security considerations in project proposals. 

Lead security team engagements to build and mature processes to produce written Standard Operating Procedures with a focus on improvement to Information Assurance processes, methodologies, and communication methods. 

Support iterative review of security assessment results and work with stakeholders across organizations to provide structure around risk management and internal controls. 

Experience with CIS Benchmarks and DISA STIGs to provide system hardening guidance. 

Maintain a Master Library of Security Benchmarks for relevant systems as a reference for essential baseline security requirements, compliance and continuous monitoring capabilities. 

Provide status updates and follow-up on active open Security Engineering tickets. 

Align with and support the execution of the Cybersecurity Information Assurance organization vision and strategy. 

Development of security guidance, policies, and procedures. 

Qualifications

• Bachelor’s degree or equivalent work experience in related field and 3-5 years of relevant work experience with network engineering and/or system administration background (Unix/Linux/Windows)
• Previous experience with cloud providers like Azure and using Agile tools for day-to-day tasking preferably Azure Dev Ops. 
• Experience with leading daily scrums, sprint planning and facilitating the scrum process (Scrum Certification preferred)
• Sound cyber security knowledge foundation, to include understanding of Computer and network technology fundamentals. 
• Strong familiarity with NIST Security Controls (NIST 800-53) and ITIL Certification
• Experience with ServiceNow
• Experience with security tools in an enterprise environment to include installation, configuration, usage, and troubleshooting. 
• Demonstrate security expertise with multiple Windows, and Unix-based operating systems. 
• Excellent verbal and written communication skills and ability to build strong relationships with stakeholders at all levels. 
• Strong problem-solving capabilities and the ability to effectively communicate solutions. 
• Strong analytical capabilities. 
• Strong understanding of how computer systems and networks are secured and in compliance with government and industry regulations. 
• Ability to independently collect, review, and evaluate IT product data to identify and characterize security threat sources of concern and provide recommendations to Government leadership. 
• Ability to articulate ideas to both technical and non-technical audiences through excellent written and oral communication skills. 
• The ability to establish effective relationships with internal partners and teams. 
Must possess a valid baseline security certification (e.g., CompTIA Security+, CISSP, CEH, or DoD equivalent)
Ability to obtain Public Trust Clearance