Cybersecurity Information Assurance / Security Assessor

We are seeking a Cybersecurity Information Assurance/Security Assessor to join our team in support of a DoD client's Cloud Service Offering program. This position is a combination of remote (20%) and onsite (80%) support at either Crystal City, VA or Fort Meade, MD.

Responsibilities Include:

• Provide cybersecurity support and guidance for overall confidentiality, availability, and integrity of capabilities in MS Azure environments.
  
  
  
  • This role works closely with the Government Cybersecurity Lead, as well as the other areas supporting the customer (e.g. Engineering, Operations) and is expected to represent the customer in various briefings and meetings with senior leadership.
  
  
  
  
• Participate in risk assessment during the Accreditation and Authorization process.
• Design, develop, test, implement, and integrate information assurance architecture, system, or system components.
• Participate in information systems risk assessments and design security countermeasures to mitigate identified risks.
• Ensure the architecture and design of DoD information systems (IS) are functional and secure.
• As necessary, design and develop IA or IA enabled products, interface specifications, and approaches to secure the environment.
• Utilize experience and judgment to plan and accomplish the organization's security related goals.
• Support system or network designs that encompass multiple boundaries to include those with differing data protection/classification requirements.
• Report to IA issues with separate reporting to other senior management for network operational requirements, as necessary.
• Provide support services for protecting the DoDIN from cyber threats, both foreign and domestic, through the use of cybersecurity systems, in combination with Techniques, Tactics, and Procedures (TTP) and information sharing with DOD, DHS, and other federal agencies.
• Support cyber threat hunt initiatives to search for signs of malicious activities or security vulnerabilities within an organization's network or digital infrastructure.
• Conduct thorough investigations of security incidents and provide high quality reports on findings and strategies of mitigation.

Required Skills, Qualifications and Experience:

• Education: Bachelor's Degree.
• Experience:
  
  
  
  • 8+ years of related experience.
  • Must have 3+ years' experience supporting Microsoft Azure in a large-scale environment.
  
  
  
  
• Security Clearance Level: Active TS/SCI or TS and SCI eligible Required.
• Certifications: Current DoD 8570 IAT Level II (Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP) required.
  
  
  
  • IAT Level III preferred (CISSP, CASP CE, CCNP, CISA)
  
  
  
  
• Location: Must reside within a commutable distance of either Crystal City, VA or Fort Meade, MD to work a HYBRID onsite schedule (80% onsite / 20% remote).
• Technical Skills:
  
  
  
  • Must have understanding of Joint Worldwide Intelligence Communications Systems (JWICS) and enhanced security requirements and accreditation process.
  • Expert knowledge of commonly used cybersecurity systems to include, but not limited to, DoD Host Based Security System (HBSS), Assured Compliance Assessment Solution (ACAS), Continuous Monitoring and Risk Scoring (CMRS), Joint Incident Management System (JIMS), Enterprise Mission Assurance Support Service (eMASS) and DHS Information Assurance Compliance System (IACS).
  • Experience in cybersecurity programs policies and implementation for Department of Defense (DoD) impact level 6 and impact level 7.
  • Expert knowledge implementing heightened security controls for sensitive systems (i.e., AC, PE, IA, AU and PS).
  • Experience in Cyber Network Defense (CND) / Cybersecurity Service Provider (CSSP) as required to meet DOD Information Assurance Workforce Improvement Program (DOD 8570.01-M) Security Categorization and Control Selection for National Security Systems (CNSSI 1253) and Security and Privacy Controls for Information Systems and Organizations (NIST 800-53) standards
  • Experience with Azure Sentinel, Lighthouse and Defender ATP
  • Experience with commercial cloud services (AWS, Azure, GCP) is a plus
  • Experience with Agile software development is a plus
  • Experience with DoD RMF process, ACAS and HBSS.
  
  
  
  

Preferred Qualifications:

• Ability to thrive in a highly collaborative, fast-paced, growth-focused environment
• Provide guidance and direction to other professionals, acts in a consulting and/or advisory capacity
• Coordinates resolution of highly complex problems and tasks, possesses ability to meet and operate under deadlines.
• Comfort with collaborating with all areas of the program to deliver more robust solutions.

Work Environment and Physical Demand:

• Sitting for long periods of time.

Compensation: $150,000 - $170,000