Classified Cyber Sec Sr Stf - E5

Standard Job Description

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Basic Qualifications

Previous ISSM experience.

Possess DoD 8570 IAM Level III certification (CISM, CISSP, GSLC, CCISO).

Experience with interfacing with Defense Counterintelligence and Security Agency (DCSA).

Experience with implementing Defense Counterintelligence and Security Agency Assessment and Authorization Guide (DAAG).

Experience with implementing Defense Counterintelligence and Security Agency Assessment and Authorization Process Manual (DAAPM).

Desired Skills

Subject Matter Expert (SME) in the implementation of Risk Management Framework (RMF) across multiple phases of large programs.

Demonstrated customer focus – Evaluates decisions through the eyes of the customer, builds strong customer relationships, creates processes with customer viewpoint and partners with customers to help shape future initiatives.

Strong analytical and strong problem-solving skills - Communicates in a clear and succinct manner and effectively evaluates information / data to make decisions, anticipates obstacles and develops plans to resolve, creates actionable strategies and operational plans.

Change oriented – Actively generates process improvements, champions and drives change initiatives, confronts difficult circumstances in creative ways, balances multiple and competing priorities and executes accordingly.

Project leadership and strategic thinking skills – Understands the “big picture” analysis from cyber technological and business case perspectives.