Cybersecurity Lead Active

Role: Cybersecurity Lead

Location: Remote with Occasional visit in DC will be required

Duration: Long Term Contract

Description of project and tasks:

• Fixing cybersecurity vulnerabilities, to include implementing changes required to maintain compliance with STIGs and DoD policy

• Ensuring cybersecurity activities, as defined in DoD Instruction (DoDI) 8530.01,Cybersecurity Activities Support to DoD Information Network Operations, are effectively enabled in conjunction with the CSSP
• Work directly with the Program Manager and Agile / DevSecOps team to ensure compliance and testing is maintained

Statement of Work:

Required tasks:

• Provide Information Systems Security Engineer (ISSE) support for the Authorization and Accreditation (A&A) of the SWFT Applications, performing technical security assessments of computing environments to identify points of vulnerability or non-compliance with established Information Assurance (IA) standards and regulations, and recommending mitigation strategies
• Manage or contribute to eMASS packages by working with existing Information System Security Officers (ISSOs) to accomplish and maintain Authorization to Operate (ATO)
• Create all accreditation documentation required for submission for full ATO.
• Address relevant security controls, be responsive to the AO, and ensure that controls are addressed or added to a Plan of Actions and Milestones (POA&M) to enable full ATO
• Continuously update the ATO documentation to ensure continued compliance; ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan
• Ensure that all users have the requisite security clearances, authorization, and need-to-know, and are aware of their security responsibilities before granting access to the DCII application
• Report all security-related incidents to the Information Systems Security Manager (ISSM); initiate, with the approval of the ISSM, protective or corrective measures when a security incident or vulnerability is discovered
• Develop and maintain a System Security Plan (SSP).
• Conduct periodic reviews to ensure compliance with the SSP
• Ensure Configuration Management (CM) for security-related Information System (IS) software, hardware, and firmware are maintained and documented.

Additional duties the role would support:

• Assist in validating and decomposing government-provided requirements and support requirements elicitation by proactively meeting with stakeholders as directed by the Government Product Owner (GPO).
• Assist in providing story points, progress reporting, risk identification, and dependency identification.
• Assist in maintaining documentation of implemented functional and non-functional software requirements with traceability to government-provided requirements.
• Assist in maintaining an application data dictionary.
• Assist in collecting and tracking all application requirements using government-directed Agile tools like Jira, Gitlab, and Confluence to create a backlog of user stories to inform future development.
• Assist in reporting on completed stories and demonstrating applicable deliveries.
• Assist in complying with all DCSA testing and approval requirements for production releases.

Required skills/Level of Experience:

Hard requirements:

• Top Secret Clearance with SCI Eligibility
  • The TS SCI eligible clearance is required because that is the requirement to perform work on the AWS IL5 enclave. Work is expected to be remote
• 10+ years of experience
• CISSP
• Certified Ethical Hacker (CEH) and Certified Network Defense Architect (CNDA)
• Company must have ability to hold TS with SCI eligibility