Job Details

Email to Friend Save Back

Information Assurance Engineer

RESTON-20191, VA, US
11/08/2016

-

Required Skills

CISSP

Company

Infinity Consulting Solutions, Inc

Experience

8 to 10 Year(s)

Job Description

Information Assurance Engineer (Washington, DC)

Job Responsibilities:

Provide direct support to the federal CIS (the IA program manager), CIO, and office of
Information Technology and covers all aspects of IA program development, oversight, maintenance, and improvement.

Establish and satisfy complex system-wide information security requirements based upon the analysis of user, policy, regulatory, and resource demands.

Support customers at the highest levels in the development and implementation of doctrine and policies.

Assist with the establishment of an IA documentation framework consistent with NIST guidance in NIST SP800-37, SP800-53 r. 4., and related documents .

Review and evaluate the current IA program documentation library and develop a list of documents that need to be created or rewritten to have the IA program be fully compliant with government requirements.

Develop IA documentation necessary for compliance with federal regulations, NIST guidance, and FISMA.

Maintain all IA program documentation and perform annual reviews of the entire

Serve as an independent third-party evaluator for all systems. This includes performing
Security Control Assessment, System Characterization/Boundary Definition, Security
Categorization, System Security Plan Support, Security & Privacy Control Assessment, finalization of SA&A packages.

Establish and manage a list of POA&Ms for all information systems.

Ensure FISMA compliance by maintaining an inventory of FISMA-reportable systems and PII, supporting quarterly OMB submissions via CyberScope, and responding to audit requests from the OIG.

Support CDM by assisting with the establishment of a CDM process and coordinating a Client CDM implementation.

Perform Periodic Control Testing.

Develop test plans and conduct Security Impact Assessments.

Perform ongoing remediation and risk determination to validate security controls and assess the system security posture.

Determine a strategy for developing and managing information system contingency plans in accordance with NIST SP 800-34 Revision 1. The contingency plans must also include
Business Impact Analysis (BIA) to describe the business processes supported by each
system, and the recovery criticality and priorities for each system.

Develop brief research papers designed to apprise key CNCS information system stakeholders about emerging threats, new technologies, requirements, publications, guidance and/or legislation that may affect agency operations, assets, or individuals.

Education/Qualifications/Skills:

Bachelor's degree or higher in a technical discipline preferred.

Eight years technical experience required with five years minimum of relevant experience in IT security required.

Expert knowledge of existing Federal IT security and privacy laws, regulations, and policy, as well as emerging requirements and best practices from the private sectors required.

Strong organizational skills to balance, prioritize work, and multitask.

Strong analytical and problem solving skills.

Strong oral and written communication skills as candidate will be interfacing with the
client on a regular basis.

Ability to work independently and as part of a team.

CISSP, CAP or equivalent certification preferred.

***Must have the ability to obtain a Public Trust clearance***