Apply on Employer Site

Watershed Security · 2 months ago

Information System Security Specialist II

Virginia Beach, VA

Full-time

Onsite

Mid, Senior Level

$50K/yr - $70K/yr

5+ years exp

Watershed Security is a Veteran Owned Small Business with over 20 years of experience in Cybersecurity and Government Contracting. They are seeking an Information System Security Specialist II to support the Naval Surface Warfare Center in ensuring compliance with security policies and conducting cybersecurity vulnerability and threat analysis.

Cyber SecurityInformation TechnologyProject Management

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Coordinating and enacting required security changes, with in various levels of an organization, ensuring compliance with published policies

Conducting cybersecurity vulnerability and threat analysis

Performing STIG assessments to include using SCAP benchmarks and Evaluate STIG

Performing vulnerability assessments with the Assured Compliance Assessment Solution tool

Utilization and process execution within eMASS

Developing Plans of Actions and Milestones (POA&M) entries

Completing Risk Management Framework Step 5 authorizations in the Information System Security Engineer (ISSE) capacity

Communicating risk reduction recommendations to stakeholders

Qualification

Risk Management FrameworkIAM-II certificationSTIG assessmentsVulnerability assessmentsEMASS utilizationPlans of ActionsMilestonesISSE capacityMicrosoft Office SuiteCommunication skills

Required

Bachelor of Science in Information Systems, Bachelor of Science in Information Technology, Bachelor of Science in Computer Science, or Bachelor of Science in Computer Engineering

Five (5) years of full-time professional experience performing Risk Management Framework activities

Must be able to maintain IAM-II designation with at least one of the following active certifications: CAP, CASP CE, CISM, CISSP (or Associate), GSLC

Any level of demonstrated experience in all of the following areas: Performing STIG assessments to include using SCAP benchmarks and Evaluate STIG

Performing vulnerability assessments with the Assured Compliance Assessment Solution tool

Utilization and process execution within eMASS

Developing Plans of Actions and Milestones (POA&M) entries

Completing Risk Management Framework Step 5 authorizations in the Information System Security Engineer (ISSE) capacity

Communicating risk reduction recommendations to stakeholders

Clearance Level: SECRET; US Citizen

Ability to possibly provide onsite support in Dam Neck VA. Some/all remote work may be an option, however the norm will be onsite support. This will be dependent upon customer needs and classification level of work being performed

Some travel may be required

Proficient with Microsoft Office Suite (Word, Excel, Teams, Project). Self-Starter; detail oriented; able to brief senior level staff