Full-Time
Assessment and Authorization Specialist
J5 Consulting
Cybersecurity and compliance consulting
No salary listed
No H1B Sponsorship
Chantilly, VA, USA
In Person
Local travel within the local place of performance may be required as needed.
US Citizenship, US Top Secret Clearance Required
Category
 Cybersecurity (1) |
|---|
Required Skills
CompTIA Security+
Computer Networking
ISC2 CSSLP
Cybersecurity
Requirements
- Demonstrated experience advising and assisting customers with the Lifecycle Assessment and Authorization process.
- Demonstrated experience advising and assisting customers with development of System Security Plans.
- Demonstrated experience using commercial off-the-shelf, government off-the-shelf, and custom tools and processes or procedures to scan, identify, contain, mitigate, and remediate vulnerabilities and intrusions.
- Demonstrated experience monitoring, tracking, and updating the status of systems in the assessment queue.
- Demonstrated experience coordinating technical security assessments of computing environments and systems to identify vulnerabilities and non-compliance with established Information Assurance standards and regulations, and recommending mitigation strategies.
- Demonstrated experience assisting architects, developers, and engineers in identifying and implementing appropriate information security controls and security functionality to ensure uniform application of security policy and enterprise solutions.
- Demonstrated experience creating and reviewing Assessment and Authorization Body of Evidence documentation and assessing its compliance for Assessment and Authorization adjudication.
- Demonstrated experience validating and verifying system security requirements definitions and analysis and establishing system security designs for controls.
- Demonstrated experience assessing and mitigating system security threats or risks throughout the program life cycle.
- U.S. citizenship is required.
- An active U.S. Government Top Secret Security Clearance with a Full Scope Polygraph is required.
Responsibilities
- Advise and assist customers with the Lifecycle Assessment and Authorization process.
- Advise and assist customers with development of System Security Plans.
- Use commercial off-the-shelf, government off-the-shelf, and custom tools and processes or procedures to scan, identify, contain, mitigate, and remediate vulnerabilities and intrusions.
- Monitor, track, and update the status of systems in the assessment queue.
- Coordinate technical security assessments of computing environments and systems to identify vulnerabilities and non-compliance with established Information Assurance standards and regulations, and recommend mitigation strategies.
- Assist architects, developers, and engineers in identifying and implementing appropriate information security controls and security functionality to ensure uniform application of security policy and enterprise solutions.
- Create and review Assessment and Authorization Body of Evidence documentation and provide succinct assessments of content compliance for Assessment and Authorization adjudication.
- Validate and verify system security requirements definitions and analysis and establish system security designs for controls.
- Design, develop, implement, or integrate Information Assurance and security systems and components for networking, computing, virtualization, cloud, and enclave environments, including multiple enclaves with differing data protection requirements.
Desired Qualifications
- Demonstrated experience creating and reviewing Assessment and Authorization Body of Evidence documentation and assessing its compliance for Assessment and Authorization adjudication.
- Demonstrated experience supporting the design, development, implementation, and integration of Information Assurance and security systems and components for networking, computing, virtualization, cloud, and enclave environments, including multiple enclaves with differing data protection or classification requirements.
- Demonstrated experience in cybersecurity, information assurance, or information technology.
- Demonstrated experience implementing security and risk mitigations in compliance with Intelligence Community, Federal Information Security Modernization Act, and National Institute of Standards and Technology policies.
- Demonstrated experience supporting multiple complex programs simultaneously and prioritizing work appropriately.
- Demonstrated ability to deliver tailored briefings that clearly and concisely convey complex information-security concepts to audiences with diverse ranks, skills, and experience.
- Demonstrated experience with the customer Assessment and Authorization tracking tool and best practices for its use.
- Demonstrated experience with the customer's security-scanning requirements and documentation best practices.
- Certified Information Systems Security Professional certification.
- Certified Secure Software Lifecycle Professional certification.
- CompTIA Security+ certification.
- Authorization Professional certification.
J5 Consulting is a cybersecurity consultancy operating under the J5 Consulting name. It helps organizations assess and strengthen security programs, meet frameworks such as CMMC and NIST, and protect sensitive systems and data. The business was established as J5 Holdings Corporation and now presents its consulting services through the J5 brand. The company operates in cybersecurity professional services, translating frameworks and government requirements into assessments, remediation plans, governance practices, monitoring, technical controls, and evidence clients can use in compliance processes.
Company Size
N/A
Company Stage
N/A
Total Funding
N/A
Headquarters
N/A
Founded
N/A