Cyber Security Assessment and Authorization Analyst

Role overview

Essential requirements

• Must be able to obtain and maintain the required customer clearance for access to systems, facilities, equipment, and property.
• In-depth knowledge of NIST SP 800 series and FedRAMP guidance and standards.
• Working knowledge of OMB, FISMA, FIPS, HIPAA, and other federal information-security regulations.
• Advanced proficiency in Windows- and Linux-based computer environments.
• Must communicate effectively, manage multiple priorities, analyze complex issues, and work independently and in teams.
• Listed security certifications are preferred, including CAP, CISSP, CISM, CISA, SANS GIAC, Security+, Network+, Linux+, MCSE, CCNA, or SSCP.

Duties

• Test security-control effectiveness annually, document findings, and monitor remediation.
• Research and prepare security assessment reports, methodologies, briefings, and presentations.
• Audit customer systems and networks and document risk assessments according to NIST guidance.
• Review and update system security and contingency plans annually and recommend remediation.
• Help system owners prepare compliant security authorization packages and evaluate security controls.
• Support federal security compliance, reporting, and related processes.
• Update risk assessments following significant system or network changes.
• Brief staff on findings, compliance, corrective recommendations, and POA&M actions.

Workplace

• The source location identifies the role as remote in the United States.