Sentar Inc.

Customer Support

• Coordinate with various stakeholders, e.g., Security Engineers, Network Administrators, System Administrators, Chief Information Officers (CIOs), Information Assurance Managers (IAMs) / Information Systems Security Managers (ISSMs), certification authorities (and representatives), accreditation authorities (and representatives), program managers, vendors, etc., necessary to properly identify, document, mitigate, and manage risk attributed to the target system, network, and/or application;
• Identify, develop (directly or in coordination with applicable experts), and incorporate common artifacts found in RMF authorization packages, e.g., system architecture and boundaries, hardware and software inventories, policies and procedures, risk assessment reports, POA&Ms, data flows, PPSM accounting, and other necessary system, network, and application documentation;
• Apply knowledge and experience in identifying, assessing, and documenting compliance against applicable DoD Information Assurance (IA) security controls (technical, management, operational), Service (e.g., Army) regulations, etc., within the RMF package;
• Apply knowledge of, and ability to use, applicable compliance and authorization reporting environments (e.g., eMASS, CMRS) to document the progress of RMF risk assessments;
• Conduct root cause analysis for inconsistencies or shortfalls in system cybersecurity posture;
• Utilize vulnerability scanning and assessment tool results (e.g., ACAS/Nessus/STIG Viewer/SCAP) necessary to identify and document compliance while providing cybersecurity recommendations based on organizational requirements;
• Analyze Host-Based Security System (HBSS) and/or Endpoint Security Solution (ESS) output and configurations;
• Coordinate with system POCs, review authorization boundary diagrams, architecture/data flow diagrams, hardware/software inventories, IP address/subnet assignments, Med-COI Zone taxonomy, and other artifacts;
• Utilize compliance and authorization reporting environments (e.g., eMASS, CMRS, COAMS, MECM, and Phoenix) and coordinate with system POCs to explain compliance requirements, assist in reaching compliance, and provide training;
• Develop meeting agendas/briefings and lead/attend and speak in meetings with stakeholders to discuss status of efforts;
• Apply NIST, DoD, and DHA security requirements to include NIST SP 800-53 controls, DISA Security Technical Implementation Guides (STIGs), and Security Requirements Guides (SRGs);
• Submit Weekly Status Reports (WSRs), when applicable.

RMF, ISSM Support Specialist

Software Engineer

• Research, develop, and execute operational and analytic capabilities to support technical operations in solving unique challenges posed by criminal and national security actors
• Work within the Rapid Application Development (RAD) team to build tools and capabilities for tactical teams performing incident response and computer network operations and exploitation (CNO/CNE)
• Build and test operational prototypes for tactical teams
• Conduct analysis of case and intelligence related cyber data to develop advanced analytical tools
• Perform research of novel capabilities derived from technical analysis
• Research emerging technologies, exploitation techniques, and custom tools
• Perform reverse engineering of cyber actor tools and techniques to advance defenses
• Perform network analysis and design for law enforcement operations
• Conduct vulnerability research and analysis of technical information
• Support systems integration for law enforcement operations
• Develop custom scripts and tools for data collection and analysis
• Implement secure development practices for sensitive operational tools
• Collaborate with cross-functional teams to integrate solutions
• Adapt to the exigent nature of work which may require long and odd service hours

RMF, ISSM Support Specialist

Cyber Capability Developer