Serve as an Information Assurance SME for systems development projects in a cloud-based environment.
Review proposed systems, networks, and software for potential security risks and advise on secure product selection and implementation.
Define system scope and required level of detail for security plans and documentation.
Manage and analyze Change Requests (CRs), assessing security impact and required updates to system posture.
Provide Security Assessment & Authorization (SA&A) support for new and existing systems.
Identify, develop, and maintain required security artifacts for authorization packages.
Prepare and review System Security Plans (SSPs), including FIPS 199, FIPS 200, and E-Authentication documentation.
Coordinate and participate in Security Test & Evaluation (ST&E) activities and review ST&E reports.
Perform vulnerability assessment reviews and generate reports for System Owners and key stakeholders.
Validate system hardening, patching, and compliance with applicable security requirements and checklists.
Report status, findings, and risk posture to the Program Manager and Deputy Program Manager.

Requirements

Active Secret clearance (REQUIRED).
U.S. Citizenship required.
Bachelor's degree in a technical field (e.g., Engineering, Computer Science) or 10 years of experience in IT systems engineering or IT security architecture.
6+ years of hands-on experience in information assurance or information security.
Demonstrated ISSO experience supporting FISMA systems.
Strong expertise in cloud architecture, cloud engineering, and cloud compliance.
Ability to work in a hybrid environment (on-site and telework).
Excellent interpersonal skills with demonstrated ability to collaborate across teams and organizations.
Strong verbal and written communication skills in English.
Certifications (Required) CISSP or equivalent security certification.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

information assurancesecurity assessmentvulnerability assessmentsystem security planscloud architecturecloud engineeringsecurity documentationsystem hardeningpatch managementFISMA compliance

Soft Skills

interpersonal skillscollaborationcommunication

Certifications

CISSP