By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Responsibilities Provide technical leadership and support to the bureau’s RMF 4 Independent Assessment Team, which is responsible for conducting RMF step 4 activities for various information systems. These activities include, but are not limited to, the production of high-quality deliverables such as:Security Assessment Plans (SAP)Vulnerability scan reportsSecurity Control Test StepsVulnerability and Compliance FindingsSecurity Assessment Reports (SAR)Responsible for managing, tracking, and reporting of the RMF 4 activities conducted by the RMF 4 team for each FISMA reportable system.Responsible for managing the bureau’s Tenable team to support ongoing operations as well as the deployment of the Tenable High Availability infrastructure.Responsible for ensuring that all system deliverables comply with Information Assurance policy, specifically NIST 800-53, Information Assurance Implementation.Duties will include (but are not limited to):Based on OMB, NIST, and client specific guidance, process and related documentation, the team will develop and submit Security Authorization Packages.Brief assessment findings with system owners and ISSOs. At that time, the system owner will have a chance to discuss findings for clarification and/or correction.Make recommendations to correct RMF documentation and process deficiencies discovered while conducting reviews of completed or closed POA&Ms and RMF Packages.Assess vulnerabilities of the client systems.Ensure that the implementation of security designs properly mitigate identified threats and reduce risk.Provide input to Assessment Process activities and assist in updating/creating relevant SOP's. Required Experience/Qualifications Bachelor’s degree and 7-10 years of experience in the Assessment & Authorization (A&A) process and the Risk Management Framework (RMF) or equivalent experience in lieu of a degree.5+ years of experience managing a team.Certified Information Systems Security Professional (CISSP) or ability to obtain within 9 months; or Certified in Governance, Risk, and Compliance (CGRC) or ability to obtain within 6 months.Operational knowledge of Tenable Manager and Tenable.SC.Ability to manage and mentor an assessment team.Exceptional verbal and written communication skills including briefings and debriefings of client personnel including Information System Security Officers (ISSO), System Owners, and Chief Information Security Officer (CISO)Thorough knowledge of, and experience with, the NIST 800 series publications to include: 800-30, 800-37, 800-53, 800-53a, and 800-53b.Previous experience creating all necessary RMF step 4 Assessment and Authorization documentation. Experience should clearly be defined in resume.Ability to manage team members handling authorization packages for multiple systems of different size and complexity. Experience should be outlined in resume.Experience conducting security scans and developing findingsLess than 10% travel to local customer sites in Washington DC for Customer Meetings Preferred Experience/Qualifications Proficiency evaluating and analyzing results from the following set of tools, to include but not limited to: Nessus Pro, Nessus Manager, Tenable Security Center (Tenable.SC), and Oracle databases.Admin level background in Linux operating systems. Special Requirements/Security Clearance Clearance Level SECRET (Required to Start) Physical Demands
Options Apply for this job onlineApplyShareRefer this job to a friendRefer Sorry the Share function is not working properly at this moment. Please refresh the page and try again later. Share on your newsfeed
By Light recognizes that our strength is our people. We support every employee as an individual to build strong teams across the enterprise. Our benefit package includes:
Medical, Dental & Vision Coverage Wellness Program 401(k) Matching Disability (Short Term & Long Term) Employee Assistance Program Life Insurance Education & Training Generous Leave Policy (11 Federal Holidays, PTO, and Military Leave)By Light is an Equal Opportunity and Affirmative Action Employer. All qualified candidates will receive consideration regardless of gender, race, veteran status, disability, and any other protected class in accordance with federal, state and local laws.
Application FAQsSoftware Powered by iCIMS
www.icims.com