Senior Cybersecurity Specialist

Clearance Required: TS/SCI
At least Five (5) year experience in RMF A&A support, extensive knowledge and hands on experience in developing and documenting processes and procedures used in various IT operations and cybersecurity plans and required A&A artifacts, such as: Access Control Plan (ACP), Configuration Management Plan (CMP), Information System Contingency Plan (ISCP) that can effectively address RMF security control requirements
At least three (3) years working experience in HBSS and ACAS management and vulnerability assessment
Experience implementing applicable Computer Network Defense (CND) policies, regulations, and compliance guidance
Knowledge of security plan management and validation
CISSP Certification
DISA HBSS Certification
DoD Cybersecurity Workforce (CSWF) CSSP Analyst certification (ie, CEH, CCNA-Security)
Navy Qualified Validator II

Collaborate with existing ISSO/ISSEs in completing A&A activities through RMF Step 3
Mitigate and/or remediate vulnerabilities or misconfigurations
Provide documentation findings and severity levels of non-compliance in formalized reporting
Create/manage POA&M items
Collect system specific information in developing required artifacts
Draft SAP, SAR and RAR
Mitigating/eliminating vulnerabilities findings
Conducting manual checklists on applicable Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs)
Analyzing ACAS and Security Compliance Assessment Protocol (SCAP) vulnerability scan results
Development of Security Assessment Plan (SAP) and Risk Assessment Report (RAR)
Security Control and Control Correlation Identifiers (CCIs)/Assessment Procedures (APs) implementation
Developing and supporting Plan of Actions and Milestones (POA&M) items for outstanding findings, including drafting of mitigation and impact statements