Sr. Security Specialist

1 мес. назад

USASeniorOnsite

security assessmentrisk assessmentsecurity complianceaudit liaisoncloud security

Senior Security Specialist responsible for risk assessment, security compliance, and improving security posture in a multi-cloud and on-premise environment.

О компании

Be Challenged and Make a Difference     In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At , we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.  Description of Task to be Performed: is seeking a Sr. Security Specialist (ISSO) for our mission critical customer in Washington, DC. You will work as part of a fantastic team providing security expertise on high priority projects. Daily duties include, but are not limited to: Integral team member for agency’s risk assessment program that will be performing internal audits and building streamlined assessment processes. Having in-depth security knowledge, is highl

Требования

6+ years’ experience with NIST, FISMA, and Security Assessment & Authorization.
FedRAMP and Cloud experience (e.g., Azure, AWS, Oracle (OCI))
Knowledgeable on various security-related NIST publications (e.g., SP 800-53r5, SP 800-53A, SP 800-18r1, etc.)
An in-depth knowledge of the Risk Management Framework (RMF).
Ability to obtain and maintain a customer Public Trust clearance required. Qualified candidates can be sponsored for this clearance.
Certifications: CISSP required

Будет плюсом

Familiarity with the security control families from the NIST guidance covered by the documents that they are responsible for evaluating.
Ability to provide subject matter expert-level knowledge to the project team to ensure compliance with applicable requirements.
Demonstrated knowledge of IT Security policy implementation statements, the regulatory structure of policy, the role of the Department of Homeland Security (DHS), the Office of Management and Budget (OMB), and the National Institute of Standards and Technology (NIST).
Hands-on experience using a Governance, Risk, and Compliance tool, such as JCAM (CSAM) or eMASS.
Ability to conduct gap analysis on non-federated vendor audit results, such as SOC Type 2, HIPAA comparison review and analyze against NIST SP 800-53 Revision 5 security controls.
Hands-on experience providing C-Level presentation and reporting.
Excellent written communication skills and understand the purpose and use of the System Security Plan (SSP).
Possess an understanding of control inheritance as applied to the RMF implementation in the JCAM tool.
Ability to accurately manage complex workstreams, comprehend the application of the RMF, and understand the application of security controls across the interface, application, operating system, network, and database layers of modern information systems. Understand the applicable artifacts used as evidence to assess compliance.
Experience with multiple tools providing security functions such as vulnerability management (e.g., Nessus), configuration management (e.g., BigFix, SCCM, ePO), endpoint protection (e.g., antivirus, ATP), data loss prevention, and intrusion detection software and hardware.
Ability to evaluate data flows, network diagrams, and logical security boundaries.
Excellent oral and written communication skills
Familiarity with the use of data analysis tools, including the use of Microsoft Excel or PowerBI to combine data from multiple sources.