Project Support Specialist Security Engineer 3

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Work You’ll Do

As a Project Support Specialist Security Engineer III on the Project team, you will be responsible for…

• Coordinate federal ATO activities by tracking authorization milestones and preparing security documentation.
• Collect and organize control implementation evidence from system owners, cybersecurity teams, and information system security officers (ISSOs).
• Support the development and maintenance of system security plans, plans of action and milestones (POA&Ms), risk assessments, and authorization packages.
• Conduct client requirements analysis and data analysis; develop written recommendations and presentations; coordinate stakeholders, work plans, and milestones; and support implementation.
• Assess alignment with the NIST Risk Management Framework (RMF), NIST Cybersecurity Framework, and agency requirements; document findings and recommendations.

A successful candidate would possess these skills:

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others

The Team

Deloitte’s Government & Public Services (GPS) practice – our people, ideas, technology and outcomes – is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

Our Digital Trust & Privacy offering enables trust and safety of online communications and digital products, protecting users, consumers, and patients from harm. Enables clients to provide consumer confidence in knowing with whom they are dealing and ensuring the integrity of access to data.

The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals.

Qualifications

Required:

• Bachelor’s degree
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
• Active Public Trust security clearance required
• 3+ years of consulting experience in client requirements analysis, data analysis, recommendation and presentation development, stakeholder coordination, work-plan and milestone management, and implementation support.
• 3+ years of experience with the National Institute of Standards and Technology (NIST) Cybersecurity Framework.
• 3+ years of experience conducting cyber assessments, such as NIST/RMF security control assessments, cybersecurity maturity assessments, vulnerability assessments, and cybersecurity risk assessments.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Preferred: 

• Experience supporting federal Authority to Operate (ATO) activities, including security documentation, system security plans, plans of action and milestones (POA&Ms), risk assessments, and authorization milestones.