Minimum of 11 years' experience with a Bachelor's Degree
Implementation and validation of security controls that support the Risk Management Framework (RMF) and ICD 503 Security Accreditation
Developing architecture documentation and Systems Security Plans (SSP) to support Accreditation and Authorization (A&A) reviews
POA&M development and implementation
Coordinating with customer security organizations to achieve Authority to Operate (ATO)
Knowledge of the complex environment involving shared networks and multiple security enclaves
Engineering for Cyber engineering and integration services including security, authentication, identity management, authorization, and access control engineering
Self-starter able to work independently and build relationships with technical reps across divisions
Over 5 years of experience working on Government Agency enterprise infrastructure and engineering programs.
Nessus / Rapid7
Security Development and Operations (SecDevOps)
Various security tools and processes such as Splunk, Nessus Security Center, WebInspect, Xacta
Cloud security controls and implementation
STIG compliance and vulnerability management
CISSP
AWS Certified Security Specialty
Microsoft Office365
Experience in one or more software products associated with cyber system engineering for data analytics including SQL security, TANIUM Endpoint Management Software, Powershell, MacAfee, App Blocker, Splunk ITSI
Experience with one or more software development environments supporting commercial or open source tools including but not limited to: Linux, Python, C, Bash Scripting, Perl, SQL, Splunk Phantom, UBA, and UIPath
Experience in one or more cloud computing services and technologies including but not limited to: AWS/C2S, Microsoft Azure, Nutanix, VMware

Benefits

Government issued clearance and poly are required

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills

Risk Management Framework (RMF)ICD 503 Security AccreditationSystems Security Plans (SSP)POA&M developmentCyber engineeringSecurity controls implementationCloud security controlsVulnerability managementSoftware development (Linux, Python, C, Bash, Perl, SQL)Data analytics

Soft skills

Self-starterRelationship buildingIndependent work

Certifications

CISSPAWS Certified Security Specialty