[SJ-JOB] Certification & Accreditation Engineer, Rockville
[email protected] 12 Aug 2008 20:11:31 -0000
| Newsgroups | gmane.comp.security.jobs |
|---|---|
| Message-ID | <[email protected]> |
--------------------------------------------------- SECURITYFOCUS JOBS - NEW OPPORTUNITY --------------------------------------------------- JOB DESCRIPTION --------------------------------------------------- Position: Certification & Accreditation Engineer Location: Rockville, Maryland, United States Type: Permanent F/T Closing Date: 2008-09-08 Primary Certifier (394) Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Top Secret clearance is required. • Review all aspects of complete Certification & Accreditation packages based on NIST standards for general support systems and major applications • Recommend appropriate FIPS 199 impact level designations and identify appropriate security controls based on characterization of the general support system or major application • Review and track POA&Ms for all accepted risks upon completion of system C&A. • Provide recommendations to the government on improvements and efficiencies in the enterprise C&A process and C&A organization • Development of evaluation criteria and procedures for approval to ensure that systems are evaluated in a similar manner • Assisting with the response to data calls from OIG, OMB, and other government agencies • Provide recommendations on IT security best practices • Integrate with a team of skilled information technology security professionals demonstrating competence in the application of the system certification guidelines and procedures JOB REQUIREMENTS --------------------------------------------------- • Must possess 5 years dedicated security experience. • BS Degree preferred. • Must possess a Security related Certification (CISSP, CAP, CISM, etc) • Ability to and interest in providing support and guidance to System Owner’s through the four phases of C&A, including monitoring C&A artifact compliance, annual self-assessment (NIST 800-53A) completion, vulnerability scans, annual contingency plan testing, and POA&M management. Must possess experience with FISMA. • Ability to work effectively in a team environment and participate in collaborative initiatives which foster the mutual exchange of knowledge and expertise. • Must be able to multi-task, work independently and as part of a team, share workloads, and deal with sudden shifts in project priorities. • Ability to communicate effectively orally and in writing to build and maintain customer satisfaction and express conclusions in a clear, technically sound manner on matters associated with IT security. • Experience with developing Security Test and Evaluation Plans and analyzing the results of security test activites to evaluate the existence and effectiveness of 800-53 security controls. CONTACT --------------------------------------------------- To submit your application, please send your resume to [email protected] Knowledge Consulting Group Paul Coleridge Sr. Recruiter [email protected] --------------------------------------------------- SECURITYFOCUS JOBS --------------------------------------------------- SecurityFocus now offers an online interface for searching and managing job opportunities and resumes. http://www.securityfocus.com/jobs