Info Security Analyst

•

•

Our client seeks a Security Engineer to support the Department of Transportation’s Cybersecurity mission by joining a dedicated team of cybersecurity professionals who collaborate, cooperate, and facilitate maintaining and enhancing the security posture of DOT information systems and infrastructure. These information systems and infrastructure support the DOT mission of managing and maintaining United States critical infrastructure (i.e. highways, bridges, roads, etc.).

Top Qualifications, Skills, Experience or Certifications:

1. Six (6) years in Cybersecurity or related Information Technology fields, Bachelors and three (5) years or more experience; Masters and one (4) year or more experience
2. Experience working with NIST 800-37, 800-53, 800-30, FIPS 199 and 200, and associated Risk Management documentation
3. Experience supporting and/or directly conducting Security Assessment and Authorization (SA&A) and Authority to Operate (ATO) activities.
4. Experience updating and/or providing feedback on Information Assurance (IA) documentation; System Security Plans (SSP), Disaster Recover (DR) plans, Contingency Plans (CP), Privacy Threshold / Impact Assessments (PTA/PIA), etc.
5. Strong understanding of Federal Cybersecurity related requirements (i.e. FISMA, NIST 800 series, OMB & DHS/CISA Directives, etc.)
6. Great communications skills with the ability to describe risk management and information assurance concepts to unacquainted individuals

Job Role Specific Requirements:

1. Engage with Federal Leadership and counterparts to support cybersecurity operational environment and RMF/IA related requirements/needs; Engage with infrastructure administrators and engineers to address audit findings and Plan of Actions and Milestones to present successful remediation; Maintain comprehensive records associated with assessments, both internal and independent, compliance audits and other risk management and information assurance related activities; Work with infrastructure administrators and engineers to understand the technologies that have been put in place to meet security requirements; Work RMF/IA related ITSM (ServiceNow) assigned tickets to completion; Participate in relevant Cybersecurity and RMF/IA meetings and activities; Identify opportunities to collaborate cross-functional teams on and provide feedback to cybersecurity strategies and solutions that enhance DOT security posture

Preferred skills and qualifications:

2. Experience with and solid foundational understanding of NIST RMF, SA&A, ATO, and IA processes and best practices. Additionally, a general understanding of application and technology stacks, cloud-based systems, operating systems, databases, networking, firewalls, Data Loss Prevention, Endpoint Security Software, Network Intrusion Detection and Prevention Systems (IDS/IPS) and host-based IDS and IPS and general cyber security best practices and industry standards

Note: Candidate must be a U.S. citizen or green card holder who has resided in the U.S. for at least 3 years and the ability to obtain a public trust