Description:
Sev1Tech is looking for a Senior Cybersecurity Internal Controls Administrator (Information Assurance Engineer - Senior) will provide comprehensive support in accordance with DoDI 8500.01, DoDI 8510.01, and AR 25-2.
The Responsibilities Include But Are Not Limited To
- Providing Enterprise eMASS and RMF services, including developing RMF packages, maintaining asset lists and categorizations, and scheduling and coordinating system validation reviews
- Generate artifacts to support control compliance, review ACAS and STIG reports, and coordinate remediation efforts
- Creating, tracking, and maintaining Plan of Action Milestones (POA&M), performing annual security reviews, participating in Continuity of Operations (COOP) and Incident Response testing, and maintaining Army PPSM and Circuit Registry records
- Participate in SW Assurance reviews to ensure ongoing items are appropriately documented via eMASS POA&M
Minimum Qualifications
- Active DoD Secret Security Clearance
- Cybersecurity Certification (such as Certified Information Systems Security Professional (CISSP)/Information Systems Security Engineering Professional (ISSEP)/Security+/Certified Ethical Hacker (CEH/etc.)
- Minimum 10 years’ experience with Cybersecurity and RMF related areas
- Extensive experience with Enterprise eMASS and RMF services
- Proficiency in developing RMF packages and maintaining asset lists and categorizations
- Ability to schedule and coordinate system validation reviews
- Experience generating artifacts to support control compliance
- Knowledge of ACAS and STIG reports and coordinating remediation efforts
- Experience creating, tracking, and maintaining Plan of Action Milestones (POA&M)
- Ability to perform annual security reviews
- Participation in Continuity of Operations (COOP) and Incident Response testing
- Ability to maintain Army PPSM and Circuit Registry records
- Participation in SW Assurance reviews and documenting items via eMASS POA&M
- Experience with security compliance and control documentation
Desired Qualifications
- Bachelor's degree in Computer Science or equivalent years of experience
- Familiarity with DoDI 8500.01, DoDI 8510.01, and AR 25-2
- Strong analytical and problem-solving skills
- Excellent communication and coordination skills
- Experience with Army enterprise monitoring tools and practices
- Knowledge of security regulations and best industry practices
- Ability to work effectively in a team environment and collaborate with various stakeholders
- Experience with incident response activities
- Understanding of Continuity of Operations Plans and Communication Plans