Cybersecurity Lead (TS/SCI w/ Poly Required)

Cybersecurity Lead

Client: Defense Counterintelligence and Security Agency (DCSA)

POP: 12+ months

Location: Remote, Required to travel to DC area for occasional meetings

SCOPE

The cybersecurity lead will be fixing cybersecurity vulnerabilities, to include implementing changes required to maintain compliance with STIGs and DoD policy and ensuring cybersecurity activities, as defined in DoD Instruction (DoDI) 8530.01,Cybersecurity Activities Support to DoD Information Network Operations, are effectively enabled in conjunction with the CSSP. They will work directly with the Program Manager and Agile / DevSecOps team to ensure compliance and testing is maintained

REQUIRED SKILLS

• 10+ years of experience
• Top Secret Clearance with SCI Eligibility
• CISSP
• Certified Ethical Hacker (CEH) and Certified Network Defense Architect (CNDA)

TASKS

• Provide Information Systems Security Engineer (ISSE) support for the Authorization and Accreditation (A&A) of the SWFT Applications, performing technical security assessments of computing environments to identify points of vulnerability or non-compliance with established Information Assurance (IA) standards and regulations, and recommending mitigation strategies
• Manage or contribute to eMASS packages by working with existing Information System Security Officers (ISSOs) to accomplish and maintain Authorization to Operate (ATO)
• Create all accreditation documentation required for submission for full ATO.
• Address relevant security controls, be responsive to the AO, and ensure that controls are addressed or added to a Plan of Actions and Milestones (POA&M) to enable full ATO
• Continuously update the ATO documentation to ensure continued compliance; ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan
• Ensure that all users have the requisite security clearances, authorization, and need-to-know, and are aware of their security responsibilities before granting access to the DCII application
• Report all security-related incidents to the Information Systems Security Manager (ISSM); initiate, with the approval of the ISSM, protective or corrective measures when a security incident or vulnerability is discovered
• Develop and maintain a System Security Plan (SSP).
• Conduct periodic reviews to ensure compliance with the SSP
• Ensure Configuration Management (CM) for security-related Information System (IS) software, hardware, and firmware are maintained and documented.
• Assist in validating and decomposing government-provided requirements and support requirements elicitation by proactively meeting with stakeholders as directed by the Government Product Owner (GPO).
• Assist in providing story points, progress reporting, risk identification, and dependency identification.
• Assist in maintaining documentation of implemented functional and non-functional software requirements with traceability to government-provided requirements.
• Assist in maintaining an application data dictionary.
• Assist in collecting and tracking all application requirements using government-directed Agile tools like Jira, Gitlab, and Confluence to create a backlog of user stories to inform future development.
• Assist in reporting on completed stories and demonstrating applicable deliveries.
• Assist in complying with all DCSA testing and approval requirements for production releases.