Information Security Analyst SME with TS/SCI

Company Overview

TestPros is a successful and growing business, established in 1988 to provide Information Technology (IT) technical support services to a wide range of Commercial and U.S. Federal, State, and Local Government customers. Our capabilities include Program Management, Program Oversight, Process Audit, Intelligence Analysis, Cyber Security, NIST SP 800-171 Assessment and Compliance, Computer Forensics, Software Assurance, Software Testing, Test Automation, Section 508 and WCAG Accessibility Assessment, Localization Testing, Independent Verification and Validation (IV&V), Quality Assurance (QA), Compliance, and Research and Development (R&D) services. TestPros is an Equal Opportunity Employer.

TestPros delivers innovative independent IT assessment solutions to critical challenges facing the nation and the world.  We support the U.S. Federal Government and Commercial clients within the continental USA. TestPros is dedicated to making lives better, safer and more secure.

Job Summary

TestPros is seeking a Information Security Analyst SME to support a Federal cyber security program.

Position: Full-time

Citizenship: U.S. Citizenship

Job Title: 

Location: Arlington, VA (or Pensacola, FL) and Remote

Security Clearance: Top Secret SCI

Project overview: 

POA&M Management
The POA&M tracker lists mitigation and milestones with completion dates and serves to track
the resolution of vulnerabilities and non-compliance with security controls identified during
assessments and at any point during the system's life cycle. The Contractor shall provide a
mechanism for vulnerability and POA&M management. The status must be updated on a weekly
basis. Recommendation for closure is based on changes made to the system to remediate issues
or to mitigate the risks with the necessaiy suppo1ting evidence presented for resolution. The
Contractor shall prepare a detailed weekly status of all activities, including status of open/closed
action items, POA&M status/milestones, and any other pertinent data points as requested by the
Government.

Vulnerability lManagement
The Contractor shall perform management of technical and policy related findings as a result of
compliance, vulnerability, and penetration testing and internal reviews. The Contractor must
meet with product and service teams as required to track progress and serve as a security subject
matter expe1t on issues requiring clarification and resolution. The Contractor shall provide
guidance to ensure vulnerabilities are prioritized, fixed, mitigated, or risk accepted. The
Contractor shall deliver remediation tracking for all outstanding issues using an automated
process to manage results, trending, and report. Risk mitigation strategies, recommendations, and
applicable security controls must be documented and must include cost effective solutions that
suppot mission goals.

Security Review of System Changes
The Contractor shall review change requests to ensure the proposed changes are in accordance
with all security requirements in effect at the time of the change request. The contractor must
provide a recommendation to the Government as to whether the change request should be
approved, approved with certain conditions, or disapproved citing the reason for disapproval.
The Contractor shall maintain a reposito1y where eve1y change request is stored along with the
analysis performed by the contract for each change request. The Contractor shall also caphll"e
and store pe1tinent a1tifacts for each change request in a location commensurate with the
classification level of the artifacts. The Contractor shall prepare a detailed weekly status of all
activities, including status of change requests, open/closed action items, and any other pe1tinent
data points as request by the Government.

Comprehensive Security Technical Documentation
Activities related to managing organizational and program risk are paramount to an effective
information security program especially for complex information systems. The Contractor shall
work with the product and service teams throughout the RMF process. The Contractor shal