Application Security Specialist

Job Description Summary

This position is for an Application Security Specialist. Responsible for direct interface with agency Information Systems Security Officials (ISSO), Chief Information Officer (CIO), Science Information Officer (SIO), and other officials to support security requirements and initiatives. Responsible for the review and documentation processes of systems in the context of IT Security.Perform risk analyses which also includes risk assessment leading to a formal Authority to Operate (ATO) status of system compliance. The level of support includes guidance, recommendations, and SA&A support.•Conduct and document Privacy Impact Assessments utilizing agency guidance. •Conduct and review application and system vulnerability scans. Provide scan results to system stewards including remediation guidance. •Reviewing system logs. Develop and monitor security and privacy controls. •Develop compliance descriptions using master system security plans and when required develop agency specific control descriptions. •Assess security controls (SCA) to support ISSO certification authority. •Provide Change Management support to stewards to include completing the CM process prior to system and application changes. •Develop and manage Plan of Action and Milestones (POA&M) for systems to identify, assess, prioritize, and monitor the progress of corrective actions for security weaknesses as discovered. •Act as Security Steward and/or alternate for systems as needed. •Review draft policy and standards.•Assist in documentation of new and/or existing systems and IT investments at either a detailed (system-by-system) or an overall summarized basis. •Ensures that applications and infrastructure support activities are in full compliance with all federal wide OMB and agency policies and procedures, including adherence to EPLC standard processes and procedures, as well as adherence to federal NIST 800-53 security standards.•Provides creative solution to complex security challenges. •Provide Privacy Impact Assessment guidance and support SORN implementation. •Provide Security Critical Partner support system development activities. •Act as or support Security Stewards. •Develop and recommend control descriptions. •Develop Exceptions and Waivers to support mission-related needs. •Develop draft security and privacy policies and standards. •Develop and support Security Decision papers as needed for new or updated information security and privacy guidance, when a policy update or clarification is necessary. •Develop and deliver supplemental training to support staff. •Provide security architecture supportRequired skills•A strong understanding of vulnerabilities and remediation of vulnerabilities identified from scans•Advanced technical competencies in information assurance and security relevant to the analysis, design, and development of security features policy and controls for regulatory requirements such as FISMA, HIPAA, and the Privacy Act. •Strong understanding of the IT Security & Privacy laws, regulations, and NIST standards.•Knowledge of networks, data center, and end user device security guidelines and industry "best practices".•Advanced knowledge of IT enterprise security scanning, threat remediation, penetration testing as directly applicable to IT data processing complex with high sensitivity and personal identification/clinical systems (HIPAA) requirements.•Advanced knowledge in solving complex technical problems involving integrated operating systems and hardware platforms.•Advanced knowledge in establishing and maintaining cooperative working relationships with other employees, telecom companies, vendors, and other organizations.Desired Skills•Experience in providing security solutions for desktops, laptops, mobile devices (IPHONES, Android, Tablets) and for enterprise servers (Linux, Unix, Windows, VMWare)•Experience in a large inter-networking or distributed computing environment.•Excellent communications and interpersonal skills, and ability to work collaboratively and directly with multiple enterprise IT technical teams, as well as a diverse client community made up of administrative, executive, and scientific research personnel.•Excellent team leader skills and experience.Work Experience: 4 – 7 yearsEducation Bachelor of Science (BS) degree CertificationsCISSP , CISM, CCSSP, CCNA, CCNP, MCSE and other related certifications highly desirable

Job Summary

*****This job is reserved for TCS (Technology and Consulting Services) only.*****

Education and Experience Requirements

#techjobs

MAXIMUS Introduction

Since 1975, Maximus has operated under its founding mission of Helping Government Serve the People, enabling citizens around the globe to successfully engage with their governments at all levels and across a variety of health and human services programs. Maximus delivers innovative business process management and technology solutions that cont