My3Tech
Job Description About My3Tech: My3Tech is a CMMI Level 3, ISO 27001:2022, ISO 9001:2015 and SOC 2 Type II certified IT solutions and services firm with 16 years of experience empowering 25+ state governments and commercial clients through precision engineering and advanced technology ecosystems. Operating as a direct system integrator and staffing partner, we support mission-critical modernization programs across application development, cloud, cybersecurity, Health, Human Services and Medicaid/MMIS ecosystems. We deploy specialized professionals to seamlessly integrate with client teams, providing the experienced resources needed to drive digital transformation. Role: IT Security Analyst 3 Job Location: Lansing, MI (Hybrid) Duration: 1 year with extension likely Interview Process: 1st round interviews will be held virtually with a potential for a 2nd round in-person. Candidates MUST be available for an in-person interview. Work Arrangement: Hybrid: Resource will be working a hybrid schedule. NO REMOTE ONLY OPTION. Will need to be onsite from day 1, two days a week. Candidate Location: Local candidates ONLY. Candidates must be located within 90 miles of Lansing, MI at time of submission. Top Skills & Years of Experience: Governance, Risk and Compliance (GRC): 3+ years (Key light preferred) Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPPA, FERPA: Required - 5 Years Exposure to Complex IT web Applications, within the past 5 years: Required - 5 Years Experience leading meetings and making oral and written reports: Required - 5 Years Experience working as a liaison between different business and IT areas: Required - 5 Years Job Description: This Senior IT Business/Compliance Analyst position serves as a senior resource within the Department of Technology, Management and Budget (DTMB) Agency Services for Michigan Department of Civil Rights (MDCR), Michigan Civil Service Commission (MCSC) and Michigan Department of Lifelong Education, Advancement and Potential (MILEAP). The role provides high level oversight, guidance, and strategic direction for completing, updating, and maintaining System Security Plans (SSPs) and Disaster Recovery Plans (DRPs) for the MCSC and MiLEAP applications. The primary duty of this position is performing as the compliance authority and liaison among business partners, technical teams, security groups, and management. The Senior Analyst ensures that requirements, processes, and documentation align with State of Michigan standards, NIST protocols, and enterprise security governance. This role guides stakeholders through complex compliance cycles, drives consistency across application areas. They will also work and collaborate with people outside of the DTMB Agency Services Compliance Team such as vendors, auditors, project managers, and analysts. Job Responsibilities: Provide leadership and oversight for maintaining and updating System Security Plans (SSPs), ensuring documentation accuracy, completeness, and alignment with NIST protocol and SOM compliance standards. Lead and coordinate the Authority to Operate (ATO) renewal process, including planning, preparing required materials, managing timelines, and ensuring successful approval and continuous compliance for all supported applications. Ensure all applications maintain a valid ATO on a three-year cycle and lead efforts to validate and maintain accurate security controls throughout each renewal period. Reviews and informs management on security risk assessment results and recommends corrective actions as necessary. Reviews, assesses risks and scope for high level security incidents. Develops new reports for management based on those collected metrics across multiple agencies: conducts trend analysis. Work with stakeholders to address and track Plans of Action & Milestones (POA&Ms) and other compliance requirements, ensuring timely reporting and closure. Provide senior level support across multiple business areas, MDCR, MCSC & MiLEAP, with a focus on standardized security plan updates, documentation improvements, and long-term process consistency. Analyze existing compliance documentation, identify gaps or risks, and guide corrective actions to meet regulatory and organizational requirements. Coordinate cross functional collaboration with technical teams, business owners, enterprise security personnel, and project leadership to ensure all evidence and artifacts required for SSP and ATO processes are properly completed and maintained. Oversee review, updates, and remediation of security controls, ensuring issues are tracked, communicated, and resolved in collaboration with stakeholders. Lead efforts to identify procedural gaps, risks, or required updates during renewal cycles, ensuring consistent application of best practices across all supported systems. Contribute to enterprise security governance by providing guidance, maintaining accurate records, mentoring team members, and driving timely completion of compliance activities. Leads mid to high-level Incident Responses when working to resolve incidents. Serves as the Incident response specialist for cyber event detection, correlation, response, and recovery. Job Qualifications: Bachelor's degree in cyber security, Information Assurance, Business Analytics, or IT Related Field (OR: 5 years of experience) Preferred Advanced Degrees, Master's in Cybersecurity, Information Assurance, Information Systems / IT Leadership, or an MBA with an IT or Security Concentration Educational or professional knowledge of NIST Framework and Controls a must Strong aptitude for written and oral communication Strong documentation skills Can collaborate cross-functionally Skill Requirements: Governance, Risk and Compliance (GRC) - Required 3+ years Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPPA, FERPA - Required 5 Years Exposure to Complex IT web Applications, within the past 5 years - Required 5 Years Experience leading meetings and making oral and written reports - Required 5 Years Experience working as a liaison between different business and IT areas - Required 5 Years Knowledge or experience creating supporting documentation for IT system audits - Highly Desired 2 Years Experience with the creation of Disaster Recover Plans, Business Continuity Plans, and Incident Response Plans - Highly Desired 2 Years
Job Description About My3Tech: My3Tech is a CMMI Level 3, ISO 27001:2022, ISO 9001:2015 and SOC 2 Type II certified IT solutions and services firm with 16 years of experience empowering 25+ state governments and commercial clients through precision engineering and advanced technology ecosystems. Operating as a direct system integrator and staffing partner, we support mission-critical modernization programs across application development, cloud, cybersecurity, Health, Human Services and Medicaid/MMIS ecosystems. We deploy specialized professionals to seamlessly integrate with client teams, providing the experienced resources needed to drive digital transformation. Role: IT Security Analyst 3 Job Location: Lansing, MI (Hybrid) Duration: 1 year with extension likely Interview Process: 1st round interviews will be held virtually with a potential for a 2nd round in-person. Candidates MUST be available for an in-person interview. Work Arrangement: Hybrid: Resource will be working a hybrid schedule. NO REMOTE ONLY OPTION. Will need to be onsite from day 1, two days a week. Candidate Location: Local candidates ONLY. Candidates must be located within 90 miles of Lansing, MI at time of submission. Top Skills & Years of Experience: Governance, Risk and Compliance (GRC): 3+ years (Key light preferred) Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPPA, FERPA: Required - 5 Years Exposure to Complex IT web Applications, within the past 5 years: Required - 5 Years Experience leading meetings and making oral and written reports: Required - 5 Years Experience working as a liaison between different business and IT areas: Required - 5 Years Job Description: This Senior IT Business/Compliance Analyst position serves as a senior resource within the Department of Technology, Management and Budget (DTMB) Agency Services for Michigan Department of Civil Rights (MDCR), Michigan Civil Service Commission (MCSC) and Michigan Department of Lifelong Education, Advancement and Potential (MILEAP). The role provides high level oversight, guidance, and strategic direction for completing, updating, and maintaining System Security Plans (SSPs) and Disaster Recovery Plans (DRPs) for the MCSC and MiLEAP applications. The primary duty of this position is performing as the compliance authority and liaison among business partners, technical teams, security groups, and management. The Senior Analyst ensures that requirements, processes, and documentation align with State of Michigan standards, NIST protocols, and enterprise security governance. This role guides stakeholders through complex compliance cycles, drives consistency across application areas. They will also work and collaborate with people outside of the DTMB Agency Services Compliance Team such as vendors, auditors, project managers, and analysts. Job Responsibilities: Provide leadership and oversight for maintaining and updating System Security Plans (SSPs), ensuring documentation accuracy, completeness, and alignment with NIST protocol and SOM compliance standards. Lead and coordinate the Authority to Operate (ATO) renewal process, including planning, preparing required materials, managing timelines, and ensuring successful approval and continuous compliance for all supported applications. Ensure all applications maintain a valid ATO on a three-year cycle and lead efforts to validate and maintain accurate security controls throughout each renewal period. Reviews and informs management on security risk assessment results and recommends corrective actions as necessary. Reviews, assesses risks and scope for high level security incidents. Develops new reports for management based on those collected metrics across multiple agencies: conducts trend analysis. Work with stakeholders to address and track Plans of Action & Milestones (POA&Ms) and other compliance requirements, ensuring timely reporting and closure. Provide senior level support across multiple business areas, MDCR, MCSC & MiLEAP, with a focus on standardized security plan updates, documentation improvements, and long-term process consistency. Analyze existing compliance documentation, identify gaps or risks, and guide corrective actions to meet regulatory and organizational requirements. Coordinate cross functional collaboration with technical teams, business owners, enterprise security personnel, and project leadership to ensure all evidence and artifacts required for SSP and ATO processes are properly completed and maintained. Oversee review, updates, and remediation of security controls, ensuring issues are tracked, communicated, and resolved in collaboration with stakeholders. Lead efforts to identify procedural gaps, risks, or required updates during renewal cycles, ensuring consistent application of best practices across all supported systems. Contribute to enterprise security governance by providing guidance, maintaining accurate records, mentoring team members, and driving timely completion of compliance activities. Leads mid to high-level Incident Responses when working to resolve incidents. Serves as the Incident response specialist for cyber event detection, correlation, response, and recovery. Job Qualifications: Bachelor's degree in cyber security, Information Assurance, Business Analytics, or IT Related Field (OR: 5 years of experience) Preferred Advanced Degrees, Master's in Cybersecurity, Information Assurance, Information Systems / IT Leadership, or an MBA with an IT or Security Concentration Educational or professional knowledge of NIST Framework and Controls a must Strong aptitude for written and oral communication Strong documentation skills Can collaborate cross-functionally Skill Requirements: Governance, Risk and Compliance (GRC) - Required 3+ years Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPPA, FERPA - Required 5 Years Exposure to Complex IT web Applications, within the past 5 years - Required 5 Years Experience leading meetings and making oral and written reports - Required 5 Years Experience working as a liaison between different business and IT areas - Required 5 Years Knowledge or experience creating supporting documentation for IT system audits - Highly Desired 2 Years Experience with the creation of Disaster Recover Plans, Business Continuity Plans, and Incident Response Plans - Highly Desired 2 Years
CCI- Computer Consultants International, Inc.
Job Description Local MICHIGAN candidates only: Candidates must be located within 90 miles of Lansing, MI at time of submission. Interview process: 2nd round interviews will occur onsite in Lansing, MI. MANDATORY REQUIREMENTS: Governance, Risk and Compliance (GRC) (3+ years) Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPPA, FERPA (5 years) Exposure to Complex IT web Applications, within the past 5 years Experience leading meetings and making oral and written reports (5 years) Experience working as a liaison between different business and IT areas (5 years) EDUCATION: Bachelor's degree in cyber security, Information Assurance, Business Analytics, or IT Related Field OR 5 years of experience PREFERRED SKILLS & QUALIFICATIONS: Knowledge or experience creating supporting documentation for IT system audits (2 Years) Experience with the creation of Disaster Recover Plans, Business Continuity Plans, and Incident Response Plans (2 Years) Keylight experience (1+ Years) The role provides high level oversight, guidance, and strategic direction for completing, updating, and maintaining System Security Plans (SSPs) and Disaster Recovery Plans (DRPs) for the MCSC and MiLEAP applications. The primary duty of this position is performing as the compliance authority and liaison among business partners, technical teams, security groups, and management. The Senior Analyst ensures that requirements, processes, and documentation align with State of Michigan standards, NIST protocols, and enterprise security governance. This role guides stakeholders through complex compliance cycles, drives consistency across application areas. They will also work and collaborate with people outside of the DTMB Agency Services Compliance Team such as vendors, auditors, project managers, and analysts. Job responsibilities: Provide leadership and oversight for maintaining and updating System Security Plans (SSPs), ensuring documentation accuracy, completeness, and alignment with NIST protocol and SOM compliance standards. Lead and coordinate the Authority to Operate (ATO) renewal process, including planning, preparing required materials, managing timelines, and ensuring successful approval and continuous compliance for all supported applications. Ensure all applications maintain a valid ATO on a three year cycle and lead efforts to validate and maintain accurate security controls throughout each renewal period. Reviews and informs management on security risk assessment results and recommends corrective actions as necessary. Reviews, assesses risks and scope for high level security incidents. Develops new reports for management based on those collected metrics across multiple agencies: conducts trend analysis. Work with stakeholders to address and track Plans of Action & Milestones (POA&Ms) and other compliance requirements, ensuring timely reporting and closure. Provide senior level support across multiple business areas, MDCR, MCSC & MiLEAP, with a focus on standardized security plan updates, documentation improvements, and long term process consistency. Analyze existing compliance documentation, identify gaps or risks, and guide corrective actions to meet regulatory and organizational requirements. Coordinate cross functional collaboration with technical teams, business owners, enterprise security personnel, and project leadership to ensure all evidence and artifacts required for SSP and ATO processes are properly completed and maintained. Oversee review, updates, and remediation of security controls, ensuring issues are tracked, communicated, and resolved in collaboration with stakeholders. Lead efforts to identify procedural gaps, risks, or required updates during renewal cycles, ensuring consistent application of best practices across all supported systems. Contribute to enterprise security governance by providing guidance, maintaining accurate records, mentoring team members, and driving timely completion of compliance activities. Leads mid to high-level Incident Responses when working to resolve incidents. Serves as the Incident response specialist for cyber event detection, correlation, response, and recovery. Assignment duration: 1 year with extension likely Position location: Lansing, MI ( HYBRID : Resource will be working a hybrid schedule. NO REMOTE ONLY OPTION. Will need to be onsite from day 1, two days a week) Local candidates ONLY. Candidates must be located within 90 miles of Lansing, MI at time of submission. Interview process : 1st round interviews will be held virtually with a potential for a 2nd round in-person. Candidates MUST be available for an IN-PERSON INTERVIEW .
Job Description Local MICHIGAN candidates only: Candidates must be located within 90 miles of Lansing, MI at time of submission. Interview process: 2nd round interviews will occur onsite in Lansing, MI. MANDATORY REQUIREMENTS: Governance, Risk and Compliance (GRC) (3+ years) Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPPA, FERPA (5 years) Exposure to Complex IT web Applications, within the past 5 years Experience leading meetings and making oral and written reports (5 years) Experience working as a liaison between different business and IT areas (5 years) EDUCATION: Bachelor's degree in cyber security, Information Assurance, Business Analytics, or IT Related Field OR 5 years of experience PREFERRED SKILLS & QUALIFICATIONS: Knowledge or experience creating supporting documentation for IT system audits (2 Years) Experience with the creation of Disaster Recover Plans, Business Continuity Plans, and Incident Response Plans (2 Years) Keylight experience (1+ Years) The role provides high level oversight, guidance, and strategic direction for completing, updating, and maintaining System Security Plans (SSPs) and Disaster Recovery Plans (DRPs) for the MCSC and MiLEAP applications. The primary duty of this position is performing as the compliance authority and liaison among business partners, technical teams, security groups, and management. The Senior Analyst ensures that requirements, processes, and documentation align with State of Michigan standards, NIST protocols, and enterprise security governance. This role guides stakeholders through complex compliance cycles, drives consistency across application areas. They will also work and collaborate with people outside of the DTMB Agency Services Compliance Team such as vendors, auditors, project managers, and analysts. Job responsibilities: Provide leadership and oversight for maintaining and updating System Security Plans (SSPs), ensuring documentation accuracy, completeness, and alignment with NIST protocol and SOM compliance standards. Lead and coordinate the Authority to Operate (ATO) renewal process, including planning, preparing required materials, managing timelines, and ensuring successful approval and continuous compliance for all supported applications. Ensure all applications maintain a valid ATO on a three year cycle and lead efforts to validate and maintain accurate security controls throughout each renewal period. Reviews and informs management on security risk assessment results and recommends corrective actions as necessary. Reviews, assesses risks and scope for high level security incidents. Develops new reports for management based on those collected metrics across multiple agencies: conducts trend analysis. Work with stakeholders to address and track Plans of Action & Milestones (POA&Ms) and other compliance requirements, ensuring timely reporting and closure. Provide senior level support across multiple business areas, MDCR, MCSC & MiLEAP, with a focus on standardized security plan updates, documentation improvements, and long term process consistency. Analyze existing compliance documentation, identify gaps or risks, and guide corrective actions to meet regulatory and organizational requirements. Coordinate cross functional collaboration with technical teams, business owners, enterprise security personnel, and project leadership to ensure all evidence and artifacts required for SSP and ATO processes are properly completed and maintained. Oversee review, updates, and remediation of security controls, ensuring issues are tracked, communicated, and resolved in collaboration with stakeholders. Lead efforts to identify procedural gaps, risks, or required updates during renewal cycles, ensuring consistent application of best practices across all supported systems. Contribute to enterprise security governance by providing guidance, maintaining accurate records, mentoring team members, and driving timely completion of compliance activities. Leads mid to high-level Incident Responses when working to resolve incidents. Serves as the Incident response specialist for cyber event detection, correlation, response, and recovery. Assignment duration: 1 year with extension likely Position location: Lansing, MI ( HYBRID : Resource will be working a hybrid schedule. NO REMOTE ONLY OPTION. Will need to be onsite from day 1, two days a week) Local candidates ONLY. Candidates must be located within 90 miles of Lansing, MI at time of submission. Interview process : 1st round interviews will be held virtually with a potential for a 2nd round in-person. Candidates MUST be available for an IN-PERSON INTERVIEW .
Chenega Corporation
Arlington, Virginia
Job Description Job Description Overview Intermediate Information Security Specialist Arlington, VA (Pentagon) Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! Chenega Systems (CS) provides federal agencies empowered solutions in Cybersecurity and Data Visualization. Our Subject Matter Experts offer decades of experience working in the federal marketplace and the data visualization environment. Under general supervision, the Intermediate Information Security Specialist uses current information security technology disciplines and practices to ensure the confidentiality, integrity, and availability of corporate information assets by established standards and procedures. Responsibilities Develop and maintain knowledgebase of changing regulatory, threat, and technology landscapes to continually develop or maintain security policies and standards and ensure compliance throughout the organization. Provide technical support to Army Intelligence Enterprise, by identifying CS requirements and specifications in accordance with Intelligence Community Directives and Standards; participating in staff assistance visits for data gathering, performing technical analysis, and documenting CS requirements; conducting studies and preparing evaluations regarding the feasibility of using new technology; and analysis of customer requirements. Provide technical support in assessing Army Intelligence Enterprise information needs and develop the required documents. Conduct daily independent research, analyze data, develop analysis of alternatives, and formulate recommendations to acquire senior government leadership approval on a variety of Army Intel IT topics within the DoD and Intelligence Community (IC). Provide the Authorizing Official (AO) and Program-Information Systems Security Manager (P-ISSM) support of the Risk Management Framework (RMF) Assessment and Authorization (A&A) efforts for the Army Intelligence Enterprise. Review RMF security packages, identify salient security issues, make the determination as to whether an agency system meets the appropriate Intelligence Community Directive (ICD) 503 information security requirements for that particular system, and provide a final recommendation as to whether the level of system residual risk is acceptable to the Government. Provide input regarding the Army Intelligence Enterprise modernization lines of effort in the areas such as Continuous Monitoring (CONMON) and Common Standardization. Provide Subject Matter Expert (SME) support on all aspects of mission command and Army Intelligence Enterprise support and participate in working groups weekly and councils bi-weekly. Investigate and analyze all response activities related to cyber security incidents within the network environment or enclave; serve as action officer coordinating cyber security sanitization and reporting; perform incident triage to include determining scope, urgency, and potential impact and track and document incidents from initial detection through final resolution. Maintain Cybersecurity related documentation, including collecting, consolidating, and/or generating the data required for the documentation and drafting the documents in accordance with the appropriate DoD, Army, and IC directives, instructions, regulations, or best business practices. Facilitate senior government leadership review and approval of all updated or modified documents and maintain configuration control of the documents. Schedule and conduct appropriate initial introductory training, and applicable remedial Cybersecurity/IA awareness training for all contractor, government and military employees that have access to ODCS, G-2 networks in accordance with official guidance and the ODCS, G-2 Security Standard Operating Procedure (SOP). Maintain and update ODCS, G-2 training material to reflect changes in DoD, Army, and IC Cybersecurity policy or other information provided by the ISSM. At a minimum, the contractor shall conduct a yearly review of the training materials with the ISSM and submit revised training materials to the ISSM for review and approval before final publication. Ensure unit records for ODCS, G-2 employees, in the Army Training and Army Training Certification Tracking System (ATCTS) replacement, are up to date to reflect employee training statuses. Manage or coordinate unit records in the ATCTS for all G-2 information system account holders IAW AR 25-2 and local requirements. Coordinate with Help Desk and applicable POCs for all G-2 information system access coordination and process DD Form 2875's to determine eligibility for access across all applicable domains for approval. Assist the Information System Security Manager (ISSM) or conduct physical inspections of Automated Information System (AIS) deemed ready for end-of-life (EOL) disposal in accordance with the ODCS, G-2 Security SOP and the ISSM, in coordination with the hardware team. Review ODCS, G-2 network and system configurations quarterly to ensure the ability to capture data mandated by the DoD, Army, and IC Directives and Standards. Review operating systems, Active Directory, databases, hardware architecture, network devices, folder structures, and applications for security compliance in accordance with DoD, Army, and IC Directives and Standards. Review and execute system configuration guidance and compliance checklist in accordance with ISSM instructions using use STIGViewer to review DISA's most recently published Security Technical Implementation Guides (STIG) and/or Security Requirements Guide (SRG) as applicable to review security compliance status. Be responsible for managing the G-2 Army Data Auditing Management (ADAM) program including training and tracking Observer, Operator, Custodian, Approver roles, serving as Removable Media Custodian, and maintaining documentation of all removable media transfers. Other duties as assigned Qualifications Bachelor of Arts/Science 5+ years of experience in protected information environments (e.g., SIPR, SAP, JWICS, etc.) IAM Level II in accordance with DoD 8570.01-M Active TS/SCI clearance Successfully pass background and drug screening Preferred Qualifications: ISC(2) Certified in Governance, Risk and Compliance (CGRC) or comparable industry certification Experience working within the Army and/or Intelligence Community (IC) Knowledge, Skills and Abilities: Knowledge of and experience with ICD 503 and the Government's assessment and authorization process Practical knowledge and application of the Enterprise Mission Assurance Support Service (eMASS) information system assessment and authorization tool How you'll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. Benefits At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you. Chenega MIOS's culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega's impact on the world. Chenega MIOS News- Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - Glassdoor at-Chenega-MIOS- EI_IE369514.11,23.htm LinkedIn - Facebook - Systems, LLC
Job Description Job Description Overview Intermediate Information Security Specialist Arlington, VA (Pentagon) Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! Chenega Systems (CS) provides federal agencies empowered solutions in Cybersecurity and Data Visualization. Our Subject Matter Experts offer decades of experience working in the federal marketplace and the data visualization environment. Under general supervision, the Intermediate Information Security Specialist uses current information security technology disciplines and practices to ensure the confidentiality, integrity, and availability of corporate information assets by established standards and procedures. Responsibilities Develop and maintain knowledgebase of changing regulatory, threat, and technology landscapes to continually develop or maintain security policies and standards and ensure compliance throughout the organization. Provide technical support to Army Intelligence Enterprise, by identifying CS requirements and specifications in accordance with Intelligence Community Directives and Standards; participating in staff assistance visits for data gathering, performing technical analysis, and documenting CS requirements; conducting studies and preparing evaluations regarding the feasibility of using new technology; and analysis of customer requirements. Provide technical support in assessing Army Intelligence Enterprise information needs and develop the required documents. Conduct daily independent research, analyze data, develop analysis of alternatives, and formulate recommendations to acquire senior government leadership approval on a variety of Army Intel IT topics within the DoD and Intelligence Community (IC). Provide the Authorizing Official (AO) and Program-Information Systems Security Manager (P-ISSM) support of the Risk Management Framework (RMF) Assessment and Authorization (A&A) efforts for the Army Intelligence Enterprise. Review RMF security packages, identify salient security issues, make the determination as to whether an agency system meets the appropriate Intelligence Community Directive (ICD) 503 information security requirements for that particular system, and provide a final recommendation as to whether the level of system residual risk is acceptable to the Government. Provide input regarding the Army Intelligence Enterprise modernization lines of effort in the areas such as Continuous Monitoring (CONMON) and Common Standardization. Provide Subject Matter Expert (SME) support on all aspects of mission command and Army Intelligence Enterprise support and participate in working groups weekly and councils bi-weekly. Investigate and analyze all response activities related to cyber security incidents within the network environment or enclave; serve as action officer coordinating cyber security sanitization and reporting; perform incident triage to include determining scope, urgency, and potential impact and track and document incidents from initial detection through final resolution. Maintain Cybersecurity related documentation, including collecting, consolidating, and/or generating the data required for the documentation and drafting the documents in accordance with the appropriate DoD, Army, and IC directives, instructions, regulations, or best business practices. Facilitate senior government leadership review and approval of all updated or modified documents and maintain configuration control of the documents. Schedule and conduct appropriate initial introductory training, and applicable remedial Cybersecurity/IA awareness training for all contractor, government and military employees that have access to ODCS, G-2 networks in accordance with official guidance and the ODCS, G-2 Security Standard Operating Procedure (SOP). Maintain and update ODCS, G-2 training material to reflect changes in DoD, Army, and IC Cybersecurity policy or other information provided by the ISSM. At a minimum, the contractor shall conduct a yearly review of the training materials with the ISSM and submit revised training materials to the ISSM for review and approval before final publication. Ensure unit records for ODCS, G-2 employees, in the Army Training and Army Training Certification Tracking System (ATCTS) replacement, are up to date to reflect employee training statuses. Manage or coordinate unit records in the ATCTS for all G-2 information system account holders IAW AR 25-2 and local requirements. Coordinate with Help Desk and applicable POCs for all G-2 information system access coordination and process DD Form 2875's to determine eligibility for access across all applicable domains for approval. Assist the Information System Security Manager (ISSM) or conduct physical inspections of Automated Information System (AIS) deemed ready for end-of-life (EOL) disposal in accordance with the ODCS, G-2 Security SOP and the ISSM, in coordination with the hardware team. Review ODCS, G-2 network and system configurations quarterly to ensure the ability to capture data mandated by the DoD, Army, and IC Directives and Standards. Review operating systems, Active Directory, databases, hardware architecture, network devices, folder structures, and applications for security compliance in accordance with DoD, Army, and IC Directives and Standards. Review and execute system configuration guidance and compliance checklist in accordance with ISSM instructions using use STIGViewer to review DISA's most recently published Security Technical Implementation Guides (STIG) and/or Security Requirements Guide (SRG) as applicable to review security compliance status. Be responsible for managing the G-2 Army Data Auditing Management (ADAM) program including training and tracking Observer, Operator, Custodian, Approver roles, serving as Removable Media Custodian, and maintaining documentation of all removable media transfers. Other duties as assigned Qualifications Bachelor of Arts/Science 5+ years of experience in protected information environments (e.g., SIPR, SAP, JWICS, etc.) IAM Level II in accordance with DoD 8570.01-M Active TS/SCI clearance Successfully pass background and drug screening Preferred Qualifications: ISC(2) Certified in Governance, Risk and Compliance (CGRC) or comparable industry certification Experience working within the Army and/or Intelligence Community (IC) Knowledge, Skills and Abilities: Knowledge of and experience with ICD 503 and the Government's assessment and authorization process Practical knowledge and application of the Enterprise Mission Assurance Support Service (eMASS) information system assessment and authorization tool How you'll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. Benefits At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you. Chenega MIOS's culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega's impact on the world. Chenega MIOS News- Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - Glassdoor at-Chenega-MIOS- EI_IE369514.11,23.htm LinkedIn - Facebook - Systems, LLC
Dev Technology
Ashburn, Virginia
Job Description Job Description Information Security Specialist Officer, Technical Lead, AWS Security • RMF & ATO • NIST 800-53 • Cloud Application Security Clearance: Active CBP, DHS, or Top Secret Clearance required Work Arrangement: Hybrid - onsite 3 days/week during standard business hours in Ashburn, VA About the Role Dev Technology Group is seeking a Senior Information Security Specialist to lead and develop a mid-sized team of ISSOs supporting the security, compliance, and authorization of mission-critical federal applications and information systems hosted in AWS. This is a hands-on technical leadership role combining people leadership, federal cybersecurity expertise, and direct collaboration with government and technical stakeholders. You will mentor junior and mid-level ISSOs while partnering with system owners, developers, architects, cloud/infrastructure engineers, security professionals, and government stakeholders throughout the system development lifecycle. You will provide practical security guidance for AWS-hosted applications, lead Risk Management Framework (RMF) and Authority to Operate (ATO) activities, oversee vulnerability management and continuous monitoring, and translate federal cybersecurity requirements into actionable guidance for technical teams. What You'll Do Lead, mentor, and develop a team of ISSOs by establishing priorities, providing technical direction and coaching, and promoting accountability and consistent security practices. Lead and oversee RMF, ATO, security authorization, compliance, vulnerability management, and continuous monitoring activities across a portfolio of federal systems and applications. Partner with ISSMs, system owners, assessors, developers, architects, engineers, and government stakeholders to maintain authorizations, identify risks, and address security requirements. Lead vulnerability management efforts, prioritizing remediation, developing mitigation strategies, and tracking corrective actions through resolution. Develop, assess, document, and support implementation of security controls aligned with FISMA, NIST 800-53, DHS, and client requirements . Prepare and maintain security and authorization documentation, including SSPs, ISAs, audit artifacts, and RMF documentation . Provide cybersecurity guidance for applications and systems deployed in AWS and integrate security throughout the software development lifecycle. Validate security implementation through technical reviews, discussions, interviews, assessments, and tabletop exercises. Support security audits, assessments, compliance reviews, and reviews of information systems and network connections. Interpret federal and client security policies and translate requirements into practical guidance for technical and development teams. Identify and escalate security risks, communicate priorities and remediation status, and provide clear visibility to Dev Technology leadership and government stakeholders. Develop and present security metrics, status reports, risk assessments, and executive briefings . Establish and improve security processes, procedures, templates, dashboards, and workflows to improve consistency, accountability, and efficiency across the ISSO team. Build trusted relationships with government clients through proactive communication, collaboration, and face-to-face engagement. Required Education, Experience & Skills Bachelor's degree and 7+ years of experience securing federal information systems. Demonstrated experience leading and mentoring information security professionals , including junior and mid-level ISSOs. Experience leading cybersecurity activities in a federal government client environment and working directly with government stakeholders.' Strong working knowledge of NIST Risk Management Framework (RMF) and experience supporting federal systems through security authorization and ATO activities . Experience developing, implementing, assessing, or documenting security controls aligned with FISMA and NIST 800-53 . Experience with vulnerability management, continuous monitoring, security assessments, audits, or compliance reviews for federal systems. Experience providing cybersecurity guidance for AWS-hosted applications and systems . Strong understanding of modern information systems and their technical security considerations. Ability to work effectively with developers, architects, engineers, government stakeholders, and technical and non-technical audiences. Strong written and verbal communication skills, including the ability to communicate security risks and technical findings and develop/present security documentation and executive briefings. Ability to establish priorities, manage competing demands, independently manage security activities, and escalate issues appropriately. Proactive, solutions-oriented approach to identifying risks and improving security practices. Current CBP, DHS, or Top Secret Clearance. Ability to work onsite 3 days per week in Ashburn, VA during standard business hours. Cybersecurity certification such as CISSP, CISM, GIAC, Security+, or another recognized cybersecurity certification. Preferred Education, Experience & Skills Experience developing or supporting RMF and authorization artifacts, including SSPs, ISAs, PTAs, ATTs, POA&Ms , and related documentation. Experience partnering with application development, cloud engineering, and DevSecOps teams to integrate security throughout the SDLC. Experience working in an Agile software development environment using Jira or similar platforms. Experience with GRC tools such as CSAM or similar platforms supporting authorization, compliance, vulnerability management, and security activities. Understanding of AI concepts and practical applications of AI for cybersecurity operations, risk analysis, compliance, or security program management. Our estimated salary range for this position is $88,000 - $ 150,000. This presented salary range is not a guarantee of compensation or salary. Offered salary is based on experience, geographic location, and possibly contractual requirements as appropriate to the role. Salary could fall outside of this range. Who We Are Dev Technology is a growing IT company with an employee-centric culture that works on mission-critical projects for the federal government. We partner with our federal customers to deliver technology services and solutions, and to drive our client's missions forward through innovation. We use Agile and DevSecOps principles to provide services including application development, biometrics and identity management, cloud and infrastructure optimization, IT and legacy modernization, and data management. As a Washington Post Top Workplace award winner for the past THIRTEEN years in a row, the Top Workplaces USA for the past five years, and a recipient of the Companies As Responsive Employers (CARE) Award for the past six years, Dev Technology employees enjoy: Generous and flexible time-off policy Flexible work schedules and telework options, including remote work availability for eligible projects Career development opportunities including a mentorship program, technical and management training through Dev University, hands-on learning through DevLab, tuition reimbursement, and paid training opportunities Industry-leading benefits including a choice of two health plans that include dental and vision, flexible spending account, commuter benefits, life insurance, and more 401K matching with a 5% matching contribution Regular team and company social events including our annual party, happy hours, fitness challenges, and more A focus on community engagement including company wide support activities, employer match for donations, and time off for volunteer efforts To learn more about working at Dev Technology, visit Working At Dev Technology Group Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Dev Technology Group operates in the following states: AL, AR, AZ, CO, DC, FL, GA, ID, IL, IN, MD, MA, ME, MI, MN, MO, MS, NC, NJ, OH, OR, PA, SC, TN, TX, VA, WV.
Job Description Job Description Information Security Specialist Officer, Technical Lead, AWS Security • RMF & ATO • NIST 800-53 • Cloud Application Security Clearance: Active CBP, DHS, or Top Secret Clearance required Work Arrangement: Hybrid - onsite 3 days/week during standard business hours in Ashburn, VA About the Role Dev Technology Group is seeking a Senior Information Security Specialist to lead and develop a mid-sized team of ISSOs supporting the security, compliance, and authorization of mission-critical federal applications and information systems hosted in AWS. This is a hands-on technical leadership role combining people leadership, federal cybersecurity expertise, and direct collaboration with government and technical stakeholders. You will mentor junior and mid-level ISSOs while partnering with system owners, developers, architects, cloud/infrastructure engineers, security professionals, and government stakeholders throughout the system development lifecycle. You will provide practical security guidance for AWS-hosted applications, lead Risk Management Framework (RMF) and Authority to Operate (ATO) activities, oversee vulnerability management and continuous monitoring, and translate federal cybersecurity requirements into actionable guidance for technical teams. What You'll Do Lead, mentor, and develop a team of ISSOs by establishing priorities, providing technical direction and coaching, and promoting accountability and consistent security practices. Lead and oversee RMF, ATO, security authorization, compliance, vulnerability management, and continuous monitoring activities across a portfolio of federal systems and applications. Partner with ISSMs, system owners, assessors, developers, architects, engineers, and government stakeholders to maintain authorizations, identify risks, and address security requirements. Lead vulnerability management efforts, prioritizing remediation, developing mitigation strategies, and tracking corrective actions through resolution. Develop, assess, document, and support implementation of security controls aligned with FISMA, NIST 800-53, DHS, and client requirements . Prepare and maintain security and authorization documentation, including SSPs, ISAs, audit artifacts, and RMF documentation . Provide cybersecurity guidance for applications and systems deployed in AWS and integrate security throughout the software development lifecycle. Validate security implementation through technical reviews, discussions, interviews, assessments, and tabletop exercises. Support security audits, assessments, compliance reviews, and reviews of information systems and network connections. Interpret federal and client security policies and translate requirements into practical guidance for technical and development teams. Identify and escalate security risks, communicate priorities and remediation status, and provide clear visibility to Dev Technology leadership and government stakeholders. Develop and present security metrics, status reports, risk assessments, and executive briefings . Establish and improve security processes, procedures, templates, dashboards, and workflows to improve consistency, accountability, and efficiency across the ISSO team. Build trusted relationships with government clients through proactive communication, collaboration, and face-to-face engagement. Required Education, Experience & Skills Bachelor's degree and 7+ years of experience securing federal information systems. Demonstrated experience leading and mentoring information security professionals , including junior and mid-level ISSOs. Experience leading cybersecurity activities in a federal government client environment and working directly with government stakeholders.' Strong working knowledge of NIST Risk Management Framework (RMF) and experience supporting federal systems through security authorization and ATO activities . Experience developing, implementing, assessing, or documenting security controls aligned with FISMA and NIST 800-53 . Experience with vulnerability management, continuous monitoring, security assessments, audits, or compliance reviews for federal systems. Experience providing cybersecurity guidance for AWS-hosted applications and systems . Strong understanding of modern information systems and their technical security considerations. Ability to work effectively with developers, architects, engineers, government stakeholders, and technical and non-technical audiences. Strong written and verbal communication skills, including the ability to communicate security risks and technical findings and develop/present security documentation and executive briefings. Ability to establish priorities, manage competing demands, independently manage security activities, and escalate issues appropriately. Proactive, solutions-oriented approach to identifying risks and improving security practices. Current CBP, DHS, or Top Secret Clearance. Ability to work onsite 3 days per week in Ashburn, VA during standard business hours. Cybersecurity certification such as CISSP, CISM, GIAC, Security+, or another recognized cybersecurity certification. Preferred Education, Experience & Skills Experience developing or supporting RMF and authorization artifacts, including SSPs, ISAs, PTAs, ATTs, POA&Ms , and related documentation. Experience partnering with application development, cloud engineering, and DevSecOps teams to integrate security throughout the SDLC. Experience working in an Agile software development environment using Jira or similar platforms. Experience with GRC tools such as CSAM or similar platforms supporting authorization, compliance, vulnerability management, and security activities. Understanding of AI concepts and practical applications of AI for cybersecurity operations, risk analysis, compliance, or security program management. Our estimated salary range for this position is $88,000 - $ 150,000. This presented salary range is not a guarantee of compensation or salary. Offered salary is based on experience, geographic location, and possibly contractual requirements as appropriate to the role. Salary could fall outside of this range. Who We Are Dev Technology is a growing IT company with an employee-centric culture that works on mission-critical projects for the federal government. We partner with our federal customers to deliver technology services and solutions, and to drive our client's missions forward through innovation. We use Agile and DevSecOps principles to provide services including application development, biometrics and identity management, cloud and infrastructure optimization, IT and legacy modernization, and data management. As a Washington Post Top Workplace award winner for the past THIRTEEN years in a row, the Top Workplaces USA for the past five years, and a recipient of the Companies As Responsive Employers (CARE) Award for the past six years, Dev Technology employees enjoy: Generous and flexible time-off policy Flexible work schedules and telework options, including remote work availability for eligible projects Career development opportunities including a mentorship program, technical and management training through Dev University, hands-on learning through DevLab, tuition reimbursement, and paid training opportunities Industry-leading benefits including a choice of two health plans that include dental and vision, flexible spending account, commuter benefits, life insurance, and more 401K matching with a 5% matching contribution Regular team and company social events including our annual party, happy hours, fitness challenges, and more A focus on community engagement including company wide support activities, employer match for donations, and time off for volunteer efforts To learn more about working at Dev Technology, visit Working At Dev Technology Group Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Dev Technology Group operates in the following states: AL, AR, AZ, CO, DC, FL, GA, ID, IL, IN, MD, MA, ME, MI, MN, MO, MS, NC, NJ, OH, OR, PA, SC, TN, TX, VA, WV.