CYBERSECURITY ANALYST WITH SECURITY CLEARANCE
Spry Methods, Inc.
Washington DC 20001 US
Company Overview Spry brings a unique blend of proven service delivery, scalable and agile corporate infrastructure, and the ability to recruit and retain the best and brightest in the industry to support our customers. The Spry team engages in exciting and rewarding opportunities that challenge their abilities, in an atmosphere that encourages both personal and professional growth, fostering a positive and energetic work environment. Who We're Looking For (Position Overview): Spry Methods is looking for a Cybersecurity Analyst to support the Department of Interior's (DoI) Information System Security Line of Business (ISSLoB) Cybersecurity Program services. The Analyst will be a member of a large team that manages a variety of activities associated with the National Institute of Science and Technology (NIST) Risk Management Framework (RMF) Special Publications. More specifically, this position will provide security assessment services for customer information systems. This position is remote work with the potential for travel. What Your Day-To-Day Looks Like (Position Responsibilities): * Develop functional and technical requirements; serve as a POC for Information Systems with security issues;
* Prepare and update reports to ensure that the unit complies with mandated internal and external security reporting requirements, including Federal Information Security Modernization Act (FISMA) and Capital Planning;
* Coordinate security program and system elements with the agency IT Program Managers by evaluating system environments for security requirements and controls including: IT Security Architecture, hardware, software, telecommunications, security trends, and associated threats and vulnerabilities;
* Manage security controls to ensure confidentiality, integrity and availability of information;
* Build security into the system development process and define security specifications to Support the acquisition of new systems;
* Support System Owners or Program Officers on the review of system procurement requests to ensure that security has been considered and included;
* Adhere to and implement system security controls that ensure the protection of Sensitive but Unclassified (SBU) information using authentication techniques, encryption, firewalls, and access controls;
* Complete Security Assessments;
* Assist in the Assessment and Authorization process;
* Create and/or update the System Security Plans;
* Serve as an advisor in risk assessments of all systems and mitigate vulnerabilities;
* Adhere to Continuous Monitoring practices to ensure that security controls are maintained over the life of IT systems
* Assist the System Owner in the development, testing and maintenance of contingency plans, backup and storage procedures;
* Document all procedures according to the organizations standards;
* Audit and monitor application, system and security logs for security threats, vulnerabilities and suspicious activities; report suspicious activities to the agency Incident coordinator;
* Monitor and coordinate patch management and scanning techniques for all unit systems; participate in identification and mitigation of all system vulnerabilities;
* Support and facilitate the security awareness, training, and education program; and
* Assist the Information System Security Manager (ISSM), or CISO in any other security related duties, as required. What You Need to Succeed (Minimum Requirements): * Public Trust
* Demonstrated experience using cybersecurity tools such as: Tenable, Qualys, Governance Risk Compliance (GRC) tools (e.g. Xacta, Risk Vision, CSAM, etc.,). * 3-5 years direct experience supporting federal organizations Cybersecurity programs.
* 5+ years direct experience conducting security assessments.
* Experience drafting FISMA related artifacts to include: system security plans, incident response plans, configuration management plan, FIPS 199, digital identity risk assessments, security impact analysis, contingency plan, security assessment plans and reports, Plan of Action and Milestones (POA&M), and training materials. * Experience in applying NIST Special Publications to information systems.
* Experience with performing information system continuous monitoring of security controls to ensure that they continue to be implemented correctly, operating as intended and producing the desired outcome with respect for meeting the security requirements. * Experience participating in security assessments and/or audits. Ideally, You Also Have (Preferred Qualifications): * Certified Information Systems Security Professional (CISSP) certification, or willing to obtain this certification within 10 months of employment.
* 8+ years experience supporting federal organizations Cybersecurity programs.
* DoD 8570 IAM Level 2. #CJ Perks of Working for Us (Benefits): Medical Coverage - United Healthcare - 3 Options - Traditional - POS Choice Plus Network - HDHP - POS Choice Plus Network - HDHP - EPO Choice Network Vision Coverage - VSP - Vision Service Plan Dental Coverage - Guardian Dental - PPO Premier Plan or Value Plan Paid Holidays: Full-time employees receive 11 paid federal holidays Paid Time Off (PTO) - PTO accrural starts at 15 days per year Training Benefit - Annual training allowance available toward any job-related training or education 401 (k) - Multiple Fund Choices through Professional Capital Service (PCS) with a company match For our full list of benefits, please visit http://www.sprymethods.com/careers/benefits/ COVID-19 Vaccination Requirement The COVID-19 vaccination requirement stated in Executive Order 14042 and FAR 52.223-99 is currently not implemented, however, please note that if E.O. 14042 or other related requirements become effective, positions will require successful candidates/employees to obtain and show proof of COVID-19 vaccination(s). Spry is an equal opportunity employer and will provide reasonable accommodation to those individuals who are unable to be vaccinated consistent with federal, state, and local law. EEO Statement At Spry, we believe talented and dedicated employees are our most valued assets and the foundation of our success. We are committed to crafting a diverse and inclusive workplace that endorses engagement, creativity, quality and innovation. We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.
* Prepare and update reports to ensure that the unit complies with mandated internal and external security reporting requirements, including Federal Information Security Modernization Act (FISMA) and Capital Planning;
* Coordinate security program and system elements with the agency IT Program Managers by evaluating system environments for security requirements and controls including: IT Security Architecture, hardware, software, telecommunications, security trends, and associated threats and vulnerabilities;
* Manage security controls to ensure confidentiality, integrity and availability of information;
* Build security into the system development process and define security specifications to Support the acquisition of new systems;
* Support System Owners or Program Officers on the review of system procurement requests to ensure that security has been considered and included;
* Adhere to and implement system security controls that ensure the protection of Sensitive but Unclassified (SBU) information using authentication techniques, encryption, firewalls, and access controls;
* Complete Security Assessments;
* Assist in the Assessment and Authorization process;
* Create and/or update the System Security Plans;
* Serve as an advisor in risk assessments of all systems and mitigate vulnerabilities;
* Adhere to Continuous Monitoring practices to ensure that security controls are maintained over the life of IT systems
* Assist the System Owner in the development, testing and maintenance of contingency plans, backup and storage procedures;
* Document all procedures according to the organizations standards;
* Audit and monitor application, system and security logs for security threats, vulnerabilities and suspicious activities; report suspicious activities to the agency Incident coordinator;
* Monitor and coordinate patch management and scanning techniques for all unit systems; participate in identification and mitigation of all system vulnerabilities;
* Support and facilitate the security awareness, training, and education program; and
* Assist the Information System Security Manager (ISSM), or CISO in any other security related duties, as required. What You Need to Succeed (Minimum Requirements): * Public Trust
* Demonstrated experience using cybersecurity tools such as: Tenable, Qualys, Governance Risk Compliance (GRC) tools (e.g. Xacta, Risk Vision, CSAM, etc.,). * 3-5 years direct experience supporting federal organizations Cybersecurity programs.
* 5+ years direct experience conducting security assessments.
* Experience drafting FISMA related artifacts to include: system security plans, incident response plans, configuration management plan, FIPS 199, digital identity risk assessments, security impact analysis, contingency plan, security assessment plans and reports, Plan of Action and Milestones (POA&M), and training materials. * Experience in applying NIST Special Publications to information systems.
* Experience with performing information system continuous monitoring of security controls to ensure that they continue to be implemented correctly, operating as intended and producing the desired outcome with respect for meeting the security requirements. * Experience participating in security assessments and/or audits. Ideally, You Also Have (Preferred Qualifications): * Certified Information Systems Security Professional (CISSP) certification, or willing to obtain this certification within 10 months of employment.
* 8+ years experience supporting federal organizations Cybersecurity programs.
* DoD 8570 IAM Level 2. #CJ Perks of Working for Us (Benefits): Medical Coverage - United Healthcare - 3 Options - Traditional - POS Choice Plus Network - HDHP - POS Choice Plus Network - HDHP - EPO Choice Network Vision Coverage - VSP - Vision Service Plan Dental Coverage - Guardian Dental - PPO Premier Plan or Value Plan Paid Holidays: Full-time employees receive 11 paid federal holidays Paid Time Off (PTO) - PTO accrural starts at 15 days per year Training Benefit - Annual training allowance available toward any job-related training or education 401 (k) - Multiple Fund Choices through Professional Capital Service (PCS) with a company match For our full list of benefits, please visit http://www.sprymethods.com/careers/benefits/ COVID-19 Vaccination Requirement The COVID-19 vaccination requirement stated in Executive Order 14042 and FAR 52.223-99 is currently not implemented, however, please note that if E.O. 14042 or other related requirements become effective, positions will require successful candidates/employees to obtain and show proof of COVID-19 vaccination(s). Spry is an equal opportunity employer and will provide reasonable accommodation to those individuals who are unable to be vaccinated consistent with federal, state, and local law. EEO Statement At Spry, we believe talented and dedicated employees are our most valued assets and the foundation of our success. We are committed to crafting a diverse and inclusive workplace that endorses engagement, creativity, quality and innovation. We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.