Cyber Security Specialist (ISSO)

CSA is seeking a Cyber Security Specialist (ISSO) who will support our Navy client in Pensacola, FL.

Responsibilities

• Provide on-site CS/IA technical expertise in a broad array of areas, including CS and network security policy, and Risk Management Framework (RMF).
• Conduct risk analyses from vulnerability, compliance scans, or other audit activity.
• Coordinate/lead along with the Government CS lead and the Program of Record (PoR) PM assigned Authority to Operate (ATO) efforts and make recommendations to improve the processes.
• Develop and/or assist in the development of, but not limited to System Security Plans (SP), Security Assessment Plan (SAP), Security Assessment Report (SAR), Risk Assessment Report (RAR), Plan of Action and Milestones (POAM) System Specific Policies and Procedures, Contingency Plan (CP), Disaster Recovery Plan (DRP), Incident Response Plan (IRP), Patch and Vulnerability Management Plan, Test Results, Business Impact Analyses (BIA), and the Security Impact Analyses (SIA).
• Support security testing and analysis of Information Management/Information Technology (IM/IT) capability requests (applications, systems, networking devices) being introduced to the Navy Enterprise.
• Support the performance of security testing and evaluation of applications against applicable security criteria using common tools, including ACAS (Assured Compliance Assessment Solution), SCAP (Security Content Automation Protocol) Compliance Checker, and DISA (Defense Information (STIGs).
• Produce security testing reports, including Security Risk Assessment Reports detailing the findings noted during testing.
• Assist programs with completing security documentation to meet assessment and authorization requirements.
• Support the local ISSM with reviewing and completion of Navy System Access Authorization Requests (SAAR-N)

Qualifications

• High School Diploma or equivalent
• Active Secret clearance
• Experience executing the NIST Risk Management Framework, and supporting the security Assessment and Authorization/ATO process
• Experience with reviewing, comprehending and documenting findings from ACAS (Assured Compliance Assessment Solution) Reports
• Experience with SCAP (Security Content Automation Protocol)
• Experience with DoD Architecture Framework (DoDAF) standards and assessments of enterprise information security architecture, processes, procedures, activities, and operations
• Experience with DoD Port, Protocols, and Services Management (PPSM)
• Experience with performing cyber security risk assessments and identifying, verifying, and consolidating specific vulnerabilities, causes, analysis of alternatives and identification of appropriate corrective actions from each risk assessment conducted
• Experience with evaluation of Security Technical Implementation Guides (STIGs) to determine applicability to systems and assets
• Functional expertise with Microsoft Office suite of products, including Word, Excel, PowerPoint, Visio, and Project
• Navy Cyber Security Workforce (CSWF) baseline certification at IAM Level I or a higher level certification (or educational equivalent)
• IA Contractor Training and Certification and Computing Environment (CE) certification may be required at the task order level

Preferred Qualifications

• Six (6) or more years of relevant experience preferred
• BA or BS degree from an accredited institution in related field (e.g., Management Information Systems, Information Technology, Computer Science, Math, Business, Engineering, or Physical Science, etc.)
• Prior experience with DoD Risk Management Framework (RMF)
• Experience with eMASS and/or Vulnerability Remediation Asset Manager (VRAM)
• IT project management experience supporting Navy or DoD network systems
• Excellent oral and written communication skills, including drafting, reviewing, and editing technical graphs, briefs, or documents
• Evidence of being detail oriented with strong critical thinking in areas of IT process analysis / process improvement
• Ability to coordinate and work well with others in a team environment

This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.
Applicants may need to meet eligibility requirements for access to classified information; an active United States Department of Defense security clearance or the ability to obtain one may be required for this role.
As a federal contractor, CSA will abide by the client’s infectious disease protocols.
WE BELIEVE great companies know who they are and what they stand for. CSA’s common purpose and