Security Specialist II

Anchorage, Alaska

Security - Application Security

Contract

Our client is a leading organization in the government services sector, providing extensive assistance to defense, intelligence and federal clients throughout the United States. They are hiring a Security Specialist on a contract role to fulfill a pivotal role in delivering technical support for the Risk Management Framework (RMF), Assessment and Authorization (A&A) process, thereby safeguarding the security stance of their systems and infrastructure

Responsibilities:

As the Security Specialist, you will be responsible to establish the RMF Security Plan in eMASS and ensure compliance.
You will develop and sustain Architecture, Boundary and Dataflow diagrams for authorized systems.
Conduct inventory and documentation of hardware/software/firmware within the assessment boundary.
Execute the eMASS Implementation Plan based on the Continuous Monitoring Strategy.
Perform ACAS automated vulnerability scans and oversee system hardening procedures.
Ensure system(s) compliance with DISA STIG via SCAP scripts and manual checks.
Accurately maintain the RMF POA&M to represent risk posture and implement mitigation measures.
Update all RMF documentation according to changes and vulnerability management efforts.
Provide support in the development and updating of the Security Authorization Package (SAP) and Plan of Action and Milestones (POA&M).

Skillset:

Bachelor’s degree in Computer Science, Information Technology or similar.
Possession of Certified Information Systems Security Professional (CISSP) or equivalent certification.
Demonstrated experience with Risk Management Framework (RMF) and the Assessment and Authorization (A&A) process.
Proficient in eMASS, ACAS, SCAP, and adherence to STIG compliance.
Sound comprehension of cybersecurity principles and industry best practices.
Outstanding communication skills.