Cybersecurity Specialist
3 weeks ago
Job Summary:
Cybersecurity Specialist is responsible for assisting in the oversight and security posture of the Bureau's OpenNet/ClassNet/Cloud environments. This role involves developing the overall security strategy and assisting in the development of the information system security policy for the Bureau.
Key Responsibilities:
- Assist in planning and preparation for security Assessment and Authorization (A&A) as part of the Department's Information Assurance policy and Federal Information Security Management Act (FISMA) implementation efforts.
- Provide support for and where necessary to create security documentation for the required phases of the DOS A&A process in support of obtaining Authority to Operate (ATO) approvals of systems.
- Perform Security Impact Analysis (SIA) review of change requests and provide reporting requirements to system owners.
- Update expired security controls in ArchAngel to support security findings and reporting.
- Analyze and report on security findings identified during assessment.
- Create Plan of Action & Milestones (POAMs) for identified security control findings.
- Evaluate security control implementations for all Systems boundaries on a yearly basis.
- Categorize the information system and the information processed, stored, and/or transmitted by that system based on the impact analysis.
- Document the results of the security categorization in the system security plan Systems Security Plan (SSP).
- Identify the security controls that are provided by the organization as common controls for organizational information systems and document the controls in the control selection worksheet and database.
- Develop a strategy for the continuous monitoring of security control effectiveness and any proposed or actual changes to the information system and its environment of operation and recommend security controls based on the security categorization of the information system.
- Describe the information system (including the system boundary, system functions, and system data criticality/sensitivity) and document the description in the System Security Plan (SSP).
- Register the information system in the Department's IT Asset Baseline.
- Conduct a review of system security plan the SSP with the ISSO to ensure completeness, accuracy, and readiness for approval by the OBO Information System Owner.
- Perform Annual Control Assessments, Contingency Plan tests, and SCF updates on an annual basis for all FISMA-reportable information systems.
- Assist the ISSO in the creation of a bureau-wide Information Systems Security Policy that will be derived and aligned with existing department of state Foreign Affairs Manuals (FAM's) and Foreign Affairs Handbooks (FAH's) as well as be aligned with NIST Special Publications rev4 Security and Privacy Controls for Federal Information Systems and Organizations.
- Supports the efforts with Continuous Monitoring concepts and Risk Management Framework (RMF) methodologies to support FISMA, NIST RMF, and NIST SP 800-series publications.
- Works with Security Team to development Plans of Action & Milestones (POA&Ms) resulting from assessment discrepancies or failures. Monitors POA&Ms and works with IT System POCs to resolve. Re-assesses controls upon POA&M resolution. Provides status reports as necessary.
- Performs other job-related duties as assigned.
Requirements:
- Bachelor's degree in cybersecurity, computer science, informational technology, or related fields and 5 years of Cybersecurity experience.
- Five (5) years of experience in managing the inventory, categorization, selecting and monitoring security controls for the information systems in preparation of the Assessment and Authorization process for new and existing systems.
- Experience in implementing NIST guidance related to the Risk Management Framework and supporting Plan of Action and Milestone (POAMs) review.
- Must have experience in conducting interviews with application and system developers to document system operations surrounding security controls.
- Working knowledge of NIST Cybersecurity Framework and CIS Critical Security Controls.
- Must have an Information Assurance-type certification (CISSP, CISM, or CompTIA Security+).
- Must be a US citizen.
- Must have proficiency and understanding of FEDRAMP and the FEDRAMP process.
- Ability to conduct information system audits.
- Ability to produce documentation.
- Must possess and maintain a SECRET clearance.
- Must pass pre-employment qualifications of Cherokee Federal.
About Us:
Cherokee Nation System Solutions (CNSS) is a part of Cherokee Federal - the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government's mission with compassion and heart. To learn more about CNSS, visit https://www.cherokee-federal.com/
-
IT Specialist
3 weeks ago
Arlington, Virginia, United States Cybersecurity and Infrastructure Security Agency Full timeCybersecurity and Infrastructure Security Agency IT Specialist Job DescriptionAt the Cybersecurity and Infrastructure Security Agency, we are seeking a highly skilled IT Specialist to join our team. As an IT Specialist, you will play a critical role in supporting the agency's mission to protect the nation's critical infrastructure and cybersecurity.Key...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States Akhiok-Kaguyak Inc Full timeJob Title: Cybersecurity SpecialistAkhiok-Kaguyak Inc is seeking a highly skilled Cybersecurity Specialist to join our team. As a Cybersecurity Specialist, you will be responsible for ensuring the security and integrity of our systems and networks.Key Responsibilities:Conduct vulnerability assessments and risk management activitiesDevelop and implement IT...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States Global Systems Technologies Full timeCybersecurity SpecialistThe Cybersecurity Specialist will provide engineering and cybersecurity support services for engineering analysis, Transportation Security Equipment (TSE) development, configuration control board, technical reviews of deliverables, and other technical documentation. The specialist will provide Cybersecurity subject matter expert (SME)...
-
Cybersecurity Vulnerability Specialist
4 weeks ago
Arlington, Virginia, United States Department of Homeland Security Full timeCybersecurity Vulnerability SpecialistThe Department of Homeland Security (DHS) is seeking a Cybersecurity Vulnerability Specialist to support technical leadership roles in Vulnerability Assessment. This position is part of the DHS Cybersecurity Service, which uses a multi-phase assessment process to qualify applicants for employment.The selected candidate...
-
Cybersecurity Specialist
3 weeks ago
Arlington, Virginia, United States HunaTek Government Solutions Full timeHunaTek Government Solutions is seeking a highly skilled Cybersecurity Specialist to support an opportunity with the Department of State, Bureau of Overseas Building Operations (OBO).This 5-year program provides technical, cyber security, and cloud support, assessment and authorization of applications and infrastructure, enhancement of continuous monitoring,...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States Peraton Full timeCybersecurity SpecialistWe are seeking a highly skilled Cybersecurity Specialist to join our team at Peraton. As a Cybersecurity Specialist, you will be responsible for identifying and mitigating cyber threats to our organization's systems and data.Key Responsibilities:Support the Security Standards & Baselines (SSB) section within the Technology,...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States Texas Trust Credit Union Full timeCybersecurity Specialist Job DescriptionThe Cybersecurity Specialist will provide oversight to ensure our network, hardware, software, and related components are protected against cyber-attacks and internal threats.This individual will be responsible for providing specific security reports in various areas and aspects of the security posture on a regular...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States Pantheon Data Full timeJob SummaryPantheon Data is seeking a highly skilled Cybersecurity Specialist to join our team. As a key member of our security team, you will be responsible for ensuring the security and integrity of our information systems and applications.Key ResponsibilitiesImplement security measures and best practices to protect our systems and applicationsCreate,...
-
Cybersecurity Acquisition Specialist
4 weeks ago
Arlington, Virginia, United States Booz Allen Hamilton Full timeCybersecurity Acquisition SpecialistWe are seeking a highly skilled Cybersecurity Acquisition Specialist to join our team. As a specialist, you will analyze DoD's current cyber policies, identify areas of risk, and develop strategic cyber roadmaps to protect our nation's defense acquisitions.Key Responsibilities:Analyze DoD's current cyber policies and...
-
Cybersecurity Governance Specialist
4 weeks ago
Arlington, Virginia, United States GM Financial Full timeAbout the RoleWe are seeking a highly skilled Cybersecurity Governance Specialist to join our team at GM Financial. As a key member of our Cybersecurity team, you will be responsible for providing strategic guidance and oversight for various Cybersecurity initiatives, projects, and teams.Key ResponsibilitiesProvide support, guidance, and oversight for...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States ANALYGENCE Inc Full timeJob Summary:ANALYGENCE Inc is seeking an experienced Cybersecurity Specialist to support our federal customer in enhancing the security, resiliency, and reliability of the nation's cyber and communications infrastructure. This role directly supports the customer Mission Engineering (ME) Information Security Branch (ISB) responsible for providing...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States Nightwing Full timeAbout the RoleWe are seeking a highly skilled Cybersecurity Specialist to join our team at Nightwing. As a Cybersecurity Specialist, you will be responsible for assisting technical/management leadership on major tasks or technology assignments, establishing goals and plans that meet project objectives, and assisting in direction and control activities.Key...
-
Cybersecurity Specialist
3 weeks ago
Arlington, Virginia, United States Raytheon Technologies Full timeAbout the Role:We are seeking a highly skilled Cybersecurity Specialist to join our team at Raytheon Technologies. As a Cybersecurity Specialist, you will be responsible for assisting technical/management leadership on major tasks or technology assignments, establishing goals and plans that meet project objectives, and assisting in direction and control...
-
Senior Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States SkyePoint Decisions Full timeAbout the RoleSkyePoint Decisions is seeking a highly skilled Cybersecurity Specialist to join our team. As a key member of our cybersecurity team, you will be responsible for protecting our customer's most sensitive data and complex systems from all forms of threats.As a Cybersecurity Architect, you will design and implement secure architectures for our...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States Digital Consultants LLC Full timeJob SummaryDigital Consultants LLC is seeking a highly skilled Cybersecurity Specialist to join our team. As an Information Assurance Analyst, you will be responsible for managing the inventory, categorization, selection, and monitoring of security controls for information systems, ensuring compliance with organizational standards and preparing for the...
-
Cybersecurity Incident Response Specialist
3 weeks ago
Arlington, Virginia, United States BCMC, LLC Full timeWe are seeking a highly skilled Cybersecurity Incident Response Specialist to support our critical customer mission. The ideal candidate will have 5+ years of directly relevant experience in cyber incident management or cybersecurity operations.The Cybersecurity Incident Response Specialist will be responsible for correlating incident data to identify...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States Digital Consultants, LLC Full timeJob SummaryDigital Consultants, LLC is seeking a highly skilled Cybersecurity Specialist to support a government customer. The successful candidate will provide technical support and expertise in the analysis, design, and installation of computer-based systems, LANs/WANs, and communication systems.The Cybersecurity Specialist will ensure systems are...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States Rollout Systems Full timeJob Summary: We are seeking a highly skilled Cybersecurity Specialist to join our team at Rollout Systems. The ideal candidate will have a strong background in information assurance and security, with experience in developing and implementing security standards and procedures.Key Responsibilities:Develop and implement information assurance and security...
-
Cybersecurity Operations Specialist
4 weeks ago
Arlington, Virginia, United States ICF Full timeCyber Operations SpecialistWe're seeking a highly skilled Cyber Operations Specialist to join our team at ICF. As a key member of our cybersecurity team, you will play a critical role in ensuring the protection and resilience of critical infrastructure.Key Responsibilities:Support the development of processes for internal and external planning and...
-
Cybersecurity Specialist
4 weeks ago
Arlington, Virginia, United States Booz Allen Hamilton Full timeJob Summary:As a Cybersecurity Specialist at Booz Allen Hamilton, you will play a critical role in protecting cyber assets and identifying vulnerabilities. You will demonstrate expertise in correlating cyber vulnerabilities to customers' cyber terrain using scanning technologies. Your technical knowledge of ACAS, HBSS, and Tanium will enable you to run...