Security Control Assessor ~ Cross Domain Solutions

Invictus International Consulting, LLC Alexandria , VA 22313

Posted 3 months ago

Title: Cross Domain Solutions Security Control Assessor ~ SME

Location: Reston, VA, Alexandria, VA or Washington, DC

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

Responsibilities:

  • Provide support for the Assessment and Authorization (A&A) Risk Management Framework process on all client managed Cross Domain Solutions (CDS) systems, to ensure the valid and accurate review of all associated documentation; support remote sites when required

  • Conduct security assessments on various CDS and Controlled Interfaces per DoD and IC requirements for the purpose of obtaining an approval to operate

  • Accomplish risk assessments based on obtained Body of Evidence including risk, mitigations, recommendations for SAR's and POA&M's

  • Advise customers on cross domain matters in accordance with the National Cross Domain Strategy Management Office (NCDSMO) policy and client guidance

  • Provide direct support in development of other A&A related systems bodies of evidence in accordance with current NIST, ICD, DIAD guidance, using the government provide A&A tool (i.e. XACTA)

  • Attend monthly Cross Domain Technical Advisory Boards and DISN DAAs Security and Authorization Working Groups

  • Work in coordination with both internal and external systems administrators, configuration management, and network engineers to ensure proper configuration and adherence to security standards in regard to deployment actions

  • Serve as Security Controls Assessor for formal ST&E, conduct security certifications of client systems/networks/sites assessing security control compliance, providing guidance regarding remediation and mitigation of identified vulnerabilities

  • Provide guidance on the application of security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements, reviewing and determining the adequacy of required documentation

  • Develop all supporting test reports and supporting artifacts for assessments and authorizations

Requirements:

  • Bachelor's Degree in Computer Science or a related technical discipline plus 10 years' experience required; and additional 5 years of hands-on experience may be substituted in lieu of a degree

  • Proficient knowledge of Unix/Linux and NCDSMO baselined CDS and filtering applications

  • Must possess current DoD 8570 IAT III level certification

  • Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

icon no score

See how you match
to the job

Find your dream job anywhere
with the LiveCareer app.
Mobile App Icon
Download the
LiveCareer app and find
your dream job anywhere
App Store Icon Google Play Icon
lc_ad

Boost your job search productivity with our
free Chrome Extension!

lc_apply_tool GET EXTENSION

Similar Jobs

Want to see jobs matched to your resume? Upload One Now! Remove
Vulnerability Assessor Tier 2 (Vat)

Leidos

Posted 2 weeks ago

VIEW JOBS 8/3/2019 12:00:00 AM 2019-11-01T00:00 Description Job Requisition: Vulnerability Assessor Tier 2 (VAT) Job Description: Department of Homeland Security (DHS), Customs and Border Protection (CBP) Security Operations Center (SOC) is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to CBP networks through monitoring, intrusion detection and protective security services to CBP information systems including local area networks/wide area networks (LAN/WAN), commercial Internet connection, public facing websites, wireless, mobile/cellular, cloud, security devices, servers and workstations. The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems, and collects, investigates and reports any suspected and confirmed security violations. The CBP SOC Program has a critical need for a Tier 2 Vulnerability Assessor (VAT) to join our team. The VAT Team will have about 3 members. The Tier 2 VAT will perform research on current threats and vulnerabilities. Will be responsible for authoring security advisories. Manage enterprise vulnerability compliance and will conduct vulnerability assessments of IT systems. Basic Qualifications: Bachelors' degree from an accredited college in a related discipline, or equivalent experience/combined education, with 8 to 12 years of professional experience; or 6 to 10 years of professional experience with a Masters' degree.Must have a Secret Clearance with the ability to get TS/SCI. In addition to specific security clearance requirements all Department of Homeland Security CBP SOC employees are required to have or be able to favorably pass a 5 year (BI) Background Investigation. Minimum of 7 years of professional experience in incident detection and response, malware analysis, or cyber forensics In addition, minimum of five (5) years of specialized experience in one or more of the following areas: * Vulnerability Assessment * Intrusion Prevention and Detection * Policy Enforcement * Access Control and Authorization * Policy Enforcement * Application Security * Protocol Analysis * Firewall Management * Incident Response * Encryption * We-filtering * Advanced Threat Protection Extensive experience working with various security methodologies and processes, advanced knowledge of TCP/IP protocols, experience configuring and implementing various technical security solutions, extensive experience providing analysis and trending of security log data from a large number of heterogeneous security devices. Should have one or more of the following certifications: CEH, LPT, ECSA, ENSA, CNDA, ECSS, ECSP, ECES, CISSP, CCSP, SEI, OSEE, ISWP, OSCE, OSCP, CCNA Security, CCNP Security, GCIA, GREM, GPPA, GISF, GXPN, GWEB, GNFA, GMON, Desired Skills: Experience in cyber government, and/or federal law enforcement. Experience with Cyber Kill Chain. Experience in cyber government, and/or federal law enforcement. DHSCyber External Referral Bonus: Eligible Potential for Telework: No Clearance Level Required: Secret Travel: No Scheduled Weekly Hours: 40 Shift: Day Requisition Category: Professional Job Family: Cyber Security 2000 Civil Leidos Alexandria VA

Security Control Assessor ~ Cross Domain Solutions

Invictus International Consulting, LLC