Sr. Security Specialist
Posted Updated 5
views
Be Challenged and Make a Difference
In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.
Description of Task to be Performed:
AnaVation is seeking a Sr. Security Specialist (ISSO) for our mission critical customer in Washington, DC. You will work as part of a fantastic team providing security expertise on high priority projects. Daily duties include, but are not limited to:
- Integral team member for agency’s risk assessment program that will be performing internal audits and building streamlined assessment processes.
- Having in-depth security knowledge, is highly technical, and experienced in managing the security of a system's accreditation boundary.
- Focusing on the enterprise governance and risk of exposure across a multi-cloud and on-premise environment that will include multiple vendors, customers and XaaS products.
- Evaluating agency’s current system infrastructure and recommending changes to improve its security posture.
- Providing customer support for security compliance and audit liaison activities. Focus is on improving the security posture of the agency’s Forensic and Investigative Labs.
- Developing, maintaining, and assessing Security Assessment & Authorization (SA&A) packages resulting in an Authority to Operate (ATO) for IT systems.
- Creating and maintaining SSPs and supporting documentation in accordance with agency guidelines and directives. This includes writing implementation statements, creating supporting documentation (e.g., Contingency Plans, Incident Response Plans, Account Management Plans, etc.), performing self-assessments, and/or assessing your peer’s assessment, while working with system stakeholders.
- Develop, coordinate, test, and train personnel on Incident Response Plans and Contingency Plans.
- Ensuring that information systems are accredited, maintain their ATO, and are being continuously monitored.
- Performing risk assessments for agency systems/applications, to include cloud-based systems.
- Performing security control assessments to include collecting supporting artifacts/evidence and interviewing system owner/owner representatives.
- Maintaining and tracking system POA&Ms.
- Reviewing and analyzing vulnerability scan data and providing recommendations on remediation.
- Taking ownership on various projects.
- Improving processes and procedures and making recommendations to improve the security posture of the agency's IT systems and applications.
This position is on-site in Washington, DC.
Required Qualifications:
- 6+ years’ experience with NIST, FISMA, and Security Assessment & Authorization.
- FedRAMP and Cloud experience (e.g., Azure, AWS, Oracle (OCI))
- Knowledgeable on various security-related NIST publications (e.g., SP 800-53r5, SP 800-53A, SP 800-18r1, etc.)
- An in-depth knowledge of the Risk Management Framework (RMF).
- Ability to obtain and maintain a customer Public Trust clearance required. Qualified candidates can be sponsored for this clearance.
- Certifications: CISSP required
Preferred Qualifications:
- Familiarity with the security control families from the NIST guidance covered by the documents that they are responsible for evaluating.
- Ability to provide subject matter expert-level knowledge to the project team to ensure compliance with applicable requirements.
- Demonstrated knowledge of IT Security policy implementation statements, the regulatory structure of policy, the role of the Department of Homeland Security (DHS), the Office of Management and Budget (OMB), and the National Institute of Standards and Technology (NIST).
- Hands-on experience using a Governance, Risk, and Compliance tool, such as JCAM (CSAM) or eMASS.
- Ability to conduct gap analysis on non-federated vendor audit results, such as SOC Type 2, HIPAA comparison review and analyze against NIST SP 800-53 Revision 5 security controls.
- Hands-on experience providing C-Level presentation and reporting.
- Excellent written communication skills and understand the purpose and use of the System Security Plan (SSP).
- Possess an understanding of control inheritance as applied to the RMF implementation in the JCAM tool.
- Ability to accurately manage complex workstreams, comprehend the application of the RMF, and understand the application of security controls across the interface, application, operating system, network, and database layers of modern information systems. Understand the applicable artifacts used as evidence to assess compliance.
- Experience with multiple tools providing security functions such as vulnerability management (e.g., Nessus), configuration management (e.g., BigFix, SCCM, ePO), endpoint protection (e.g., antivirus, ATP), data loss prevention, and intrusion detection software and hardware.
- Ability to evaluate data flows, network diagrams, and logical security boundaries.
- Excellent oral and written communication skills
- Familiarity with the use of data analysis tools, including the use of Microsoft Excel or PowerBI to combine data from multiple sources.
Benefits
- Generous cost sharing for medical insurance for the employee and dependents
- 100% company paid dental insurance for employees and dependents
- 100% company paid long-term and short-term disability insurance
- 100% company paid vision insurance for employees and dependents
- 401k plan with generous match and 100% immediate vesting
- Competitive Pay
- Generous paid leave and holiday package
- Tuition and training reimbursement
- Life and AD&D Insurance
About AnaVation
AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.
If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!
AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.
Skills
As published by lever · 20 questions · 9 written answers
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, GitHub URL, Other website
Pick from a list (11)
- Are you Legally Authorized to Work in the United States? In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire optional
- PLEASE READ CAREFULLY AND INITIAL EACH PARAGRAPH BEFORE SIGNING I have disclosed all information that is relevant and should be considered applicable to my candidacy for employment. optional
- I understand, where permissible under applicable state and local law, I may be subject to a pre-employment drug screen and background check after receiving a conditional offer of employment to investigate my criminal background [, driving record][, credit history] and other matters related to my suitability for employment. optional
- I hereby certify that the information given by me is true in all respects. I authorize AnaVation, LLC and its representatives to contact my prior employers and all others (with the exception of my current employer, only if I have marked “May we contact?” of this application as “No”) for the purpose of verification of the information I have supplied and release same from any liability resulting from the information released. I authorize employers, schools and other persons named on this application to provide any information or transcripts requested. optional
- I understand employment with AnaVation, LLC is also contingent on my providing sufficient documentation necessary to establish my identity and eligibility to work in the United States. optional
- I hereby certify that, if employed, my employment with AnaVation, LLC will not conflict with, or result in the violation of, breach of, or default under, any contract, agreement or understanding that I am a party to or am bound by, other than those I have disclosed in this application, if any. optional
- I hereby certify that, if employed, my employment with AnaVation, LLC will not violate any non-solicitation, non-competition or other similar covenant or agreement I have with any of my prior employers, other than those I have disclosed in this application, if any. optional
- I hereby certify that, if employed, I will report to my supervisor, a representative of HR or other member of management, if I am ever harassed or discriminated against by someone in the company or if I ever become aware of any unethical behavior by any employee. optional
- I expressly understand and agree that, if employed, my employment, having no specified term, is based upon mutual consent and may be terminated at will, with or without cause, by either party (AnaVation, LLC or me) without prior notice to the other, unless otherwise prohibited by law. Additionally, I understand that no representation, whether oral or written, by any representative or agent of AnaVation, LLC, at any time, can constitute an implied or express contract of employment. I further understand no representative or agent of AnaVation, LLC has the authority to enter into an agreement for employment for any specified period of time or to make any change in any policy, procedure, benefit or other terms or condition of employment other than in a document signed by the Chief Executive Officer or an authorized representative. optional
- I certify that all of the above information is true and complete, and I understand that any falsification or omission of information may disqualify you from further consideration for employment or, if hired, may result in termination regardless of the time elapsed before discovery. Note: An offer of employment is conditioned upon complying with AnaVation, LLC's requirements including, but not limited to, signing a consent to conduct a background investigation. MY SIGNATURE IS EVIDENCE THAT I HAVE READ AND AGREE WITH THE ABOVE STATEMENTS._ Applicant's signature (selecting yes below is equivalent to a handwritten signature) optional
- This position requires eligibility for a U.S. government security clearance, which requires U.S. citizenship. Are you a U.S. citizen?
Written answers (9)
- Home address
- Have you ever been granted security clearance by a U.S. Federal Government Agency? If yes, please state the level of clearance and Granting Agency Name.
- What is your expected salary range?
- EDUCATION: Please provided School Name, Dates Attended, Major, Degree Earned for all schools attended.
- EMPLOYMENT RECORD: List all employment experience, starting with the most recent or present employer, including US Military Service, and working back for the past three employers. Using a separate section for each position, describe in detail all work experience including periods of unemployment. Resumes may not be substituted in lieu of completing the following employment information. Please include Employer Name, Position Held, Dates of Employment.
- EMPLOYMENT RECORD: List all employment experience, starting with the most recent or present employer, including US Military Service, and working back for the past three employers. Please include Employer Name, Position Held, Dates of Employment. optional
- EMPLOYMENT RECORD: List all employment experience, starting with the most recent or present employer, including US Military Service, and working back for the past three employers. Please include Employer Name, Position Held, Dates of Employment. optional
- PROFESSIONAL REFERENCES: List three professional references (other than those listed as current/former supervisor) that we may contact: Please provide Name, Relationship, Phone Number and email.