Full time
Information Technology
Telecommunications
Job Description
Job Description
Responsibilities:
Provide oversight of assigned networks to ensure compliance with Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Management (IAVM) requirements.
Support and lead RMF Assessment and Authorization (A&A) activities to obtain and maintain system ATOs under federal security requirements.
Collaborate with ISSMs, Information System Owners, Security Control Assessors, Authorizing Officials, and engineering teams to maintain system security.
Develop, review, and maintain Plans of Action and Milestones (POA&Ms), track deficiencies, and coordinate vulnerability remediation.
Perform daily, weekly, monthly, and quarterly Continuous Monitoring (ConMon) reviews, primarily using Splunk.
Assist with incident response activities and verify required system sanitization procedures.
Identify critical and high-risk vulnerabilities and report network security posture to CISO and Authorizing Official stakeholders.
Create and maintain security documentation, policies, procedures, and compliance reports.
Support security assessments, risk analysis, patch validation, and continuous improvement initiatives.
Required Qualifications:
Bachelor's degree in a related field, or an Associate's degree with 2+ years of relevant experience, or 4+ years of relevant experience.
IAT Level II certification minimum.
DoD Top Secret Security Clearance is mandatory.
Hands-on experience with RMF, ATO, federal cybersecurity, and information assurance compliance.
Strong knowledge of NIST SP 800-37, 800-53 (Revision 4/5), 800-137, 800-39, 800-171, and related security standards.
Experience preparing and maintaining ATO packages using eMASS and/or Xacta.
Experience with System Security Plans (SSPs), POA&Ms, Contingency Plans, Disaster Recovery Plans, and Incident Response documentation.
Knowledge of vulnerability assessment tools such as ACAS, Tenable Nessus, Security Center, or Nmap.
Experience with STIG compliance, vulnerability remediation, security control assessments, risk analysis, and compliance reporting.
Familiarity with Splunk and continuous monitoring.