Required Qualifications:

• Active Top Secret/SCI with Counterintelligence (CI) Polygraph.
• US Citizenship is required.
• Active IAT Level II certification.
• Proficiency in security assessment techniques, including vulnerability scanning, penetration testing, methodologies, and security control validation.
• Knowledge of configuration management and baseline enforcement (e.g., Security Technical Implementation Guides (STIGs).
• Experience with 800-53 and ICD 503 controls.
• Experience with continuous monitoring strategies and tools for maintaining system authorization

• Advise on information security and develop, administer, and maintain system security requirements and documentation packages for program Assessment and Authorization (A&A) for classified information systems.
• Work independently and with a small team of technical staff to define and document security artifacts to achieve system authorization and maintain compliance.
• Support thorough and critical reviews of Assessment and Authorization (A&A) documentation.
• Conduct risk assessments, analyze and provide mitigations for system risks and provide recommendations for risk acceptance or rejection.
• Perform audits and maintain records in accordance with approved System Security Plans (SSPs).
• Perform independent evaluations of computing architectures and identify weaknesses.
• Identify possible solutions to resolve security deficiencies.
• Present findings and recommendations to senior corporate staff and government officials.

Required Qualifications:

• Active Top Secret/SCI with Counterintelligence (CI) Polygraph.
• US Citizenship is required.
• Active IAT Level II certification.
• Proficiency in security assessment techniques, including vulnerability scanning, penetration testing, methodologies, and security control validation.
• Knowledge of configuration management and baseline enforcement (e.g., Security Technical Implementation Guides (STIGs).
• Experience with 800-53 and ICD 503 controls.
• Experience with continuous monitoring strategies and tools for maintaining system authorization.