Authorization & Accreditation Specialist

Overview

We are seeking an Authorization and Accreditation Analyst. This role is 100% onsite in Herndon, VA.

What will you do?

• Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy.
   
• Passive evaluations such as compliance audits and active evaluations such as vulnerability assessments.
   
• Establishing strict program control processes to ensure mitigation of risks and support obtaining certification and accreditation of systems.
   
• Support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
   
• Providing direct support to establishing and maintaining enclave and network accreditation and special approval authorizations, as required, for all networked and stand-alone information systems (IS), using Information Security (INFOSEC) and Information Assurance (IA) policies, such as the use of NIST or CNSS standards for security certification assessment and testing related to ICD-503 controls using CNSS 1253 controls, and other USG guidance
   
• Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.
   
• Support the formal Security Test and Evaluation required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results and preparation of required reports.
   
• Document the results of assessment and authorization activities and technical or coordination activity and prepare the system Security Plans and update the Plan of Actions and Milestones.
   
• Periodically conduct a complete review of each system's audits and monitor corrective actions until all actions are closed.
   
• Perform Information Systems Security Engineering of system architectures, requirements analysis and decomposition, including system performance test and verification.

Do you have what it takes?

• Must have a Top Secret/SCI with Polygraph.
• 3+ years experience with the Authorization and Accreditation Process 
   
• Familiarity with ICD 503
   
• Experience with and Rapid7 Nexpose scanning and results.
   
• Demonstrated ability to perform day-to-day administration of the Information Systems Security program and understanding the security design, consultation, and technology implementation for various customer projects and initiatives.
   
• Demonstrated ability to perform systems analysis & integrations, requirements analysis, process definition and implementation, and project management.
   
• Demonstrated knowledge in assisting system users relative to information systems security matters and undertakes moderately complex projects requiring additional specialized technical knowledge.
   
• Ability to demonstrate interpersonal, organizational, writing, communications, and briefing skills

Pay Range: VTG’s estimated starting pay range is $130,000-$195,000 annually, which is a general guideline for the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range.