Security Analyst - Washington DC

Principal Duties and Responsibilities:

• Develop, update, and maintain appropriate Certification & Accreditation packages based on NIST standards for general support systems and major applications
• Recommend appropriate FIPS 199 impact level designations and identify appropriate security controls based on characterization of the general support system or major application
• Develop and maintain POA&M for all accepted risks upon completion of system C&A.
• Integrate with a team of skilled information technology security professionals demonstrating competence in the application of the system certification guidelines and procedures 
• Able to provide support and guidance through the POA&M remediation process, C&A progress, including compliance monitoring of C&A artifacts, annual self-assessments (NIST 800-53), vulnerability scans.
• Awareness of current information security issues and the ability to interpret the requirements of relevant policies and standards set forth in NIST documentation, specifically, 800-37, 800-53 Rev 4, FIPS-199/200, and 800-30.
• Ability to communicate effectively orally and in writing to build and maintain customer satisfaction and express conclusions in a clear, technically sound manner on matters associated with information technology security.
• Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives. Develop, tests and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools.

General Skills:

• Provides complex engineering analysis and support for firewalls, routers, networks and operating systems. Performs and evaluates vulnerability scans within a multi-platform, large enterprise environment. Reacts to and initiates corrective action regarding security violations, attempts to gain unauthorized access, virus infections that may affect the network or other event affecting security.
• Oversees user access process to ensure operational integrity of the system. Enforces the information security configuration and maintains system for issuing, protecting, changing and revoking passwords.
• Develops technical and programmatic assessments, evaluates engineering and integration initiatives and provides technical support to assess security policies, standards and guidelines; develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.
• Performs complex product evaluations, recommends and implements products/services for network security. Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
• Reviews, recommends and oversees the installation, modification or replacement of hardware or software components and any configuration change(s) that affects security.
• Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures at server sites. Ensures system support personnel receive/maintain security awareness and training.
• Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Other Skills/Qualifications (preferred/pluses):

• Possess security certifications (CISSP, CISM, etc.)
• Good communication skills
• Strong analytical and problem solving skills to troubleshoot and resolve network/operating system security issues
• Ability to perform and interpret vulnerability assessments
• Ability to administer the operations of a security infrastructure
• Ability to balance and prioritize work
  
  Qualifications
  
  Basic Qualifications

• Bachelor's degree or equivalent combination of education and experience
• Three or more years of experience in network, host, data and/or application security in multiple operating system environments
• Demonstrate experience working with IP networking, networking protocols and understanding of security related technologies including encryption, IPsec, PKI, VPNs, firewalls, proxy services, DNS, electronic mail and access-lists
• Demonstrated Experience working with internet, web, application and network security techniques and working with relevant operating system security (Windows, Solaris, Linux, etc.)
• Proven experience working with leading firewall, network scanning and intrusion detection products and authentication technologies
• Demonstrated experience working with federal regulations related to information security (FISMA, Computer security Act, etc.) and with NIST Special Publications and C & A process methodology

Email your resume to careers@aml.ms. AML.ms, LLC. is an EEO Employer Share

Ruby on Rails & Java Software Developer, Remote (PT/FT)

OVERVIEW

We are looking for a goal oriented and self-motivated software developer who is confident, independent and willing to learn, invent and change the competitive landscape in the software space. If you have a hunger to learn new technologies, a desire to put the customer needs first, and deeply care about the product quality, this is a job for you. We are looking for individuals that can take ownership of difficult problems and show resourcefulness and leadership to find an optimal solution.


JOB DESCRIPTION
- Review, update and maintain Ruby on Rails 4.0 application code and provide development support.
- Utilize Atlassian Product Suite (Jira, Confluence, Jira Capture, Bitbucket), Github, Redmine, and other useful tools.
- Work with Linux platforms (RHEL, CentOS, Ubuntu), Amazon AWS EC2 and other Cloud providers, work on issues related to bugs in application code, scripts, gadgets, visualization APIs.
- Develop products and services and manage APIs, scripts, virtualization, and reporting while following approved change management and software development lifecycle processes, documentation and source control.
- Develop and maintain current codebase documentation.
- Participate with client in the strategic design process to translate new security and business requirements into optimized technical designs.
- Provide support for mobile reporting capabilities, user management, email security and compliance service monitoring.
- Contribute to the development of organization's goals and objectives and regularly interact with customers, senior management.

DESIRED EDUCATION/SKILLS
- BS degree in Computer Science or related field (related work experience is a plus)
- Intermediate English (French is also desirable)
- Experience with Linux (RHEL, Ubuntu, Amazon EC2) or MacOS
- Experience with software development lifecycle and utilities (JIRA, Confluence, Bitbucket/Github)
- Experience with Google Apps, Google Documents
- Working with Ruby, Rails, Javascript, Java, Bootstrap
- Superior writing and analytical skills


LOCATION
- Remote Access

COMPENSATION
- Comensurate with experience

Email your resume to careers@intrudetect.com. Intrudetect, Inc. is an EEO Employer Share

Information Security Analyst - Washington DC

OVERVIEW:

1. Ensure that applicable IT security policies are implemented for the system and for those aspects of system-related physical security also under their purview.

2. Ensure operational security posture consistent with current security policy is maintained.

3. Serve as the principal advisor to the AO, System Owner, or Chief Information Security Officer on all matters (technical and otherwise) involving security of the system.

4. Coordinate with the information System Owner to update the system security plan, manage and control changes to the system, and ensure that security impacts of proposed changes are evaluated by or reported to officials responsible for change control.

5. Report existing or potential security issues to the CIO, CISO, ISSM, AO, and System Owner.

6. Ensure that security incidents and the security status of the affected IT system are reported to the appropriate CSIRC.

7. Ensure that system audit trails are regularly examined and anomalies reported to the CSIRC.

8. Ensure documentation is developed and maintained detailing the IT hardware and software configuration and all security countermeasures that protect it. Generally, this is maintained in the System Security Plan.

9. Complete mandatory, specialized information security training annually.

10. Continuous Monitoring - The systems security is reviewed or tested annually in accordance with Department policy. Security controls are selected and tested annually. The selection of controls includes POA&Ms closed in the past 12 months as well as, high-volatile controls or those which are of greatest risk to the system. The Continuous Monitoring Test Plan is developed and updated annually. Testing is conducted at least annually.

11. Configuration Management - Ensure security baselines are maintained and validated at least annually. A report of the validation is provided to the CISO for annual FISMA reporting. Ensure system is in compliance with Departmental and DO security configuration management policies.

12. Training - Identify all personnel assigned any of the roles defined by the Department as having specialized IT security responsibilities in support of the system.  Ensure training information is reported to the CISO in support of annual FISMA reporting.  The CISO will identify the approach used for collection and reporting of annual training.

13. Reporting - Update information and artifacts in the Department FISMA system in accordance with Department policy and procedures. This includes quarterly review and update of: Plan of Action and Milestones, C&A dates and artifacts, Security Controls review and test results, Contingency Plan and annual Test Results, system interfaces and interconnections, personnel with specialized security roles, and the associated artifacts required by the Department for these performance measures.

REQUIRED SKILLS:

• CISSP certification with hands-on expertise in any two areas of the following: Access Control, Information Security Governance and Risk Management, Software Development Security, Security Architecture and Design, and Operations Security
• Hands-on knowledge of and experience with implementing NIST guidance such as: NIST 800 series special publications, especially 800-53 and 53A and C&A guidance, Federal Information Processing Standards Publications (FIPS), and OMB A-130
• Experience with the Federal Information Security Management Act (FISMA) regulations, policies, and procedures
• Demonstrated skill in reviewing and analyzing security documents and identifying problems/issues
• Some experience performing/participating in Certification and Accreditation activities (Risk Assessment, System Security Plan, ST&E)
• Ability to plan and execute work and determine when to escalate an issue
• Good writing and oral skills for reporting, training, and presentations
• Analytical, eye for detail
• Good client management skills for customer interaction

Our client is a large government organization that uses cutting edge technology. A drug and background check may be required.

LOCATION - Downtown Washington DC
Email your resume to careers@intrudetect.com. Intrudetect, Inc. is an EEO Employer Share

Solutions Architect - Project Manager - Washington DC

OVERVIEW

The Solutions Architect will be the lead technical resource involved with the creation and standup of an information and collaboration web site.  The candidate outlines web solutions and develops technical requirements.   They will need to take business requirements and translate them into technical requirements.  The candidate should be a high level solution person.  Project management experience in an enterprise web operation is necessary.  The candidate must have successfully led a web site project before.


REQUIRED SKILLS:

• 7+ years of experience with enterprise networks
• 5 years of web site development
• Must have a strong understanding of Drupal, WordPress, or SharePoint, HTML, CSS scripting validation and other relevant technologies.
• Data integration/translation/conversion
• Strong analytical, organizational, and interpersonal skills
• Experience interfacing with government senior managers as well as technical staff
• Experience providing regular status reports

Additional Qualifications:

• Technical writing experience                                                                                  
• BA or BS degree preferred
• Experience using MS Project
• PMP Certification
• Security+ Certification

Our client is a large government organization that uses cutting edge technology. A drug and background check will be required.

LOCATION - Downtown Washington DC

Email your resume to careers@intrudetect.com. Intrudetect, Inc. is an EEO Employer

Data Security Engineer - Washington DC

OVERVIEW

This position will be responsible for overall design, security,
administration and management of data for financial research
environment in addition to supporting other Data Security environment
systems. Position is responsible for all activities related to
architecture, implementation, management, and support of the systems
and processes and standards to ensure effective solutions for Data
management. Other responsibilities include but are not limited to
participating in other Data and Network Security engineering efforts,
Security Assessments, and special projects as assigned. The successful
candidate will be required to pass background investigations.

REQUIRED SKILLS:

Minimum five or more years of demonstrated experience in implementing,
administering, and supporting information security systems. Direct
experience managing security permissions for Windows and UNIX based
systems. Extensive understanding and/or experience with system
hardening best practices. Must be able to navigate and manage files
within the UNIX based system command line. Solid understanding of
directory schema (Active directory, LDAP, etc.). Extensive
understanding and/or experience with application security
(authentication, authorization, etc.). Experience with basic scripting
(TCL, Perl, Visual Basic, etc.). Extensive understanding of, and/or
experience with, configuring SSL for web applications and services.
Experience supporting Microsoft and UNIX based applications to
include, but not limited to, installation of software, management of
local rights, users, and file permissions. Solid understanding of
network topologies, protocols, SSL, and DNS. Capable of interpreting
task requirements, selecting appropriate methodologies, and carrying
out complex tasks to completion with minimum supervision. Extensive
understanding of information security best practices.

Our client is a large government organization that uses cutting edge
technology. A drug and background check will be required.

REQUIRED EDUCATION/SKILLS

- BS degree in Computer Science or related field plus 3+ years related
work experience
- Knowledge of Federal Government Data Security Standards, security
information management, operational, and technical requirements, NIST
Special Publications, FIPS 199, 800-60, etc.
- CISSP or equivalent industry certification
- U.S. Citizenship required and the ability to obtain and U.S. Public
Trust Suitability and/or Top Secret Clearance
- Microsoft SQL, SharePoint, Windows and Unix OS Platform Security,
AJAX, Java, Ruby, Python, .NET, Erlang
- Superior writing and analytical skills

LOCATION

- Downtown Washington DC

Email your resume to careers@intrudetect.com. Intrudetect, Inc. is an
EEO Employer

Developer, Government Cloud (PT/FT) Washington DC, Remote

OVERVIEW

We are looking for goal oriented and self-motivated developer who is confident, independent and willing to invent and change the competitive landscape in the software space. If you have a hunger to contribute to the cloud technology, a desire to put the customer needs first, and care deeply about product quality, this is a job for you. We are looking for individuals who can take ownership of difficult problems and show resourcefulness and leadership to find an optimal solution.

JOB DESCRIPTION

- Provides support for all incoming CRM requests for Google Apps, Amazon EC2 and other Cloud providers, works on issues related to bugs in scripts, gadgets, visualization API’s

- Reviews security integration and reporting and to improve communications between departments and maintain operations and security of performance matrix and security reporting capabilities

- Provides support for Google Apps for Government and Amazon EC2 environment delivering consolidated reporting for cyber security data calls, performance trends and history, maintenance of real-time security status, FISMA, CyberScope and new OMB initiatives

- Participates with client in the strategic design process to translate new security and business requirements into optimized technical designs

- Provides support for mobile reporting capabilities, user management and email security and compliance service monitoring with POSTINI and Google Apps Audit API, Amazon EC2

- Ensures compliance with government security policies and procedures and responsible for designing, developing or recommending integrated security system solutions that will ensure proprietary/confidential data and systems are protected

- Develop products and services and manage APIs, appscripts, and virtualizations and reporting and follow approved change management and software development lifecycle processes, documentation and source management.

- Contributes to the development of organization's goals and objectives and regularly interacts with customers, senior management

REQUIRED EDUCATION/SKILLS

- BS degree in Computer Science or related field plus 3+ years related work experience

- Knowledge of Federal Government security management, operational, and technical requirements

- CISSP or equivalent industry certification

- U.S. Citizenship required and the ability to obtain and U.S. Public Trust Suitability and/or Top Secret Clearance

- Google Apps for Government, Google Documents, API Google Web Toolkit, AJAX, Java, Ruby, Python, .NET, Erlang

- Superior writing and analytical skills

LOCATION

- Remote Access and Downtown Washington DC

Email your resume to careers@intrudetect.com. Intrudetect, Inc. is an EEO Employer Share

Security Engineer, Washington DC

JOB DESCRIPTION:

The primary functions of this position will include the following activities: IT Security Engineering and Security Architecture review and support; and design, develop and/or recommend integrated security system solutions that will ensure proprietary/confidential data and systems protected. This includes but is not limited to: managing a large systems engineering task, or performing as overall technical lead (chief engineer) for a large or complex project. Provide technical planning and technical monitoring and control support to the Program Manager. Manages a team of systems engineers, or serves as overall technical lead for a medium sized project or for portions of a large or complex project. May lead or participate in risk management and preparation of technical reviews. May lead or participate in FISMA certification and accreditation activities to include vulnerability analysis, NIST 800-53 ST&E plan development, Security Risk Assessments, and Privacy Impact Assessments. Supports business development and proposal activities. Position will allow candidate to be located in Columbia, MD or McLean, VA.

EDUCATION:

Bachelors degree in related technical discipline and 6+ years of related experience or minimum 12 years of related experience without degree. Must be U.S.Citizen

REQUIRED SKILLS:

Knowledge of NIST guidelines including 800-18, SP 800-26, 800-40, 800-53. Knowledge and experience with any of the following policies/processes: NISPOM, DCID 6/3, DITSCAP, or DIACAP; C&A testing experience; experience configuring operating system security. Knowledge of Windows, Oracle and/or UNIX, LAN/WAN/MAN, IPv*, and telecommunications devices. Ability to effectively write, organize and conduct briefings. Supports business development and proposal activities.DESIRED SKILLS: Possess an active IRS MBI, BI, medium risk or higher clearance. Knowledge of IRS Modernization planning efforts. Experience in designing, developing, documenting, installing, and supporting security requirements and controls for Network Security and Internet Security; CISSP, CISSM or other security certification; OMB regulations, including OMB A-130 or FISMA; Experience with application development or IT auditing, J2EE, Cisco, Nortel, STM, Sniffer, Firewall, Ehternet, Wireless, VOiP, mainframe equipment, PKI, VPN; Knowledge of Identity and Access Management concepts; Excellent analytical skills; and Excellent oral and written communication skills

Cloud Integrator (Security Engineer) (NW DC, Remote) - Full Time/Contract

OVERVIEW

We are looking for goal oriented and self-motivated individuals who are confident, independent and willing to invent and change the competitive landscape in the software space. If you have a hunger to contribute to the cloud technology, a desire to put the customer needs first, and care deeply about product quality, this is a job for you.

We are looking for individuals who can take ownership of difficult problems and show resourcefulness and leadership to find an optimal solution.

JOB DESCRIPTION

- Integrates and develops Google's products (Google Apps, Google Gadgets) and services into large businesses and government agencies
- Participates with the client in the strategic design process to translate security and business requirements into technical designs
- Ensures compliance with government and company security policies and procedures
- Responsible for designing, developing or recommending integrated security system solutions that will ensure proprietary/confidential data and systems are protected
- Provides technical engineering services for the support of integrated security systems and solutions
- Contributes to the development of organization's goals and objectives.
- Regularly interacts with customers, senior management

REQUIRED EDUCATION/SKILLS

- BS degree in Computer Science or related field plus 3+ years related work experience
- Knowledge of Federal Government security management, operational, and technical requirements
- CISSP or equivalent certification
- U.S. Citizenship required and the ability to obtain and U.S. Public Trust Suitability and Top Secret Clearance
- Google Apps, API Google Web Toolkit, AJAX, Java
- Superior writing and analytical skills


LOCATION

- Remote Access and Downtown Washington DC

Share

C & A Analyst - Washington DC

Principal Duties and Responsibilities:

 

• Develop, update, and maintain appropriate Certification & Accreditation packages based on NIST standards for general support systems and major applications
• Recommend appropriate FIPS 199 impact level designations and identify appropriate security controls based on characterization of the general support system or major application
• Develop and maintain POA&M for all accepted risks upon completion of system C&A.
• Integrate with a team of skilled information technology security professionals demonstrating competence in the application of the system certification guidelines and procedures 
• Able to provide support and guidance through the POA&M remediation process, C&A progress, including compliance monitoring of C&A artifacts, annual self-assessments (NIST 800-53), vulnerability scans.
• Awareness of current information security issues and the ability to interpret the requirements of relevant policies and standards set forth in NIST documentation, specifically, 800-37, 800-53, FIPS-199/200, and 800-30.
• Ability to communicate effectively orally and in writing to build and maintain customer satisfaction and express conclusions in a clear, technically sound manner on matters associated with information technology security.
• Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives. Develop, tests and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools.

General Skills:

• Provides complex engineering analysis and support for firewalls, routers, networks and operating systems. Performs and evaluates vulnerability scans within a multi-platform, large enterprise environment. Reacts to and initiates corrective action regarding security violations, attempts to gain unauthorized access, virus infections that may affect the network or other event affecting security.
• Oversees user access process to ensure operational integrity of the system. Enforces the information security configuration and maintains system for issuing, protecting, changing and revoking passwords.
• Develops technical and programmatic assessments, evaluates engineering and integration initiatives and provides technical support to assess security policies, standards and guidelines; develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.
• Performs complex product evaluations, recommends and implements products/services for network security. Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
• Reviews, recommends and oversees the installation, modification or replacement of hardware or software components and any configuration change(s) that affects security.
• Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures at server sites. Ensures system support personnel receive/maintain security awareness and training.
• Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Other Skills/Qualifications (preferred/pluses):

• Possess security certifications (CISSP, CISM, etc.)
• Good communication skills
• Strong analytical and problem solving skills to troubleshoot and resolve network/operating system security issues
• Ability to perform and interpret vulnerability assessments
• Ability to administer the operations of a security infrastructure
• Ability to balance and prioritize work
  
  Qualifications
  
  Basic Qualifications

• Bachelor's degree or equivalent combination of education and experience
• Three or more years of experience in network, host, data and/or application security in multiple operating system environments
• Demonstrate experience working with IP networking, networking protocols and understanding of security related technologies including encryption, IPsec, PKI, VPNs, firewalls, proxy services, DNS, electronic mail and access-lists
• Demonstrated Experience working with internet, web, application and network security techniques and working with relevant operating system security (Windows, Solaris, Linux, etc.)
• Proven experience working with leading firewall, network scanning and intrusion detection products and authentication technologies
• Demonstrated experience working with federal regulations related to information security (FISMA, Computer security Act, etc.) and with NIST Special Publications and C & A process methodology

Security Engineers, Washington DC

Requirements:

* 4 years of experience in LAN/WAN network
* 3 years of experience in network security in areas such as infosec, ids, etc.
* 3 years of experience in working with federal IT Security policies and procedures.
*  Experience working as as network/security lead is desired.
*  Excellent communication skills are required

The client will accept candidates with Secret clearances and upgrade them to Top
Secret. Please respond with you resume if you are interested in hearing more.

This is located in downtown DC and our client will interview very quickly.

Information Security Analyst, Washington, DC

POSITION DESCRIPTION:
Reports to the Information Technology Security Team Project Manager. The Information Security Analyst acts as a consultant, interfacing between the customer and IT security consulting team throughout the federal information system certification and accreditation life cycle. Responsible for NIST certification and accreditation as primary task area. Provides internal status reports, enforces quality control of project deliverables, and implements efficient processes and procedures for continuing improvement of services for the customer. The ideal candidate is very detail oriented with strong technical knowledge, superior writing skills, and excellent customer relationship management skills. He or she will be responsible for planning, developing, finalizing, and reviewing key deliverables in each stage of the certification and accreditation process. The Information Security Analyst will be actively engaged in identifying unique system characteristics; interviewing key organizational personnel (technical, administrative, and executive); working with consulting team to compose requisite documentation (security categorizations, risk assessments, contingency planning, etc.); and mapping complex technical requirements, functionality, and capabilities to prescribed security controls, policies, and practices. The analyst will coordinate and plan all certification and accreditation activities for existing systems and those still in development (SDLC); provide ongoing gap analysis of current policies, practices, and procedures as they relate to established guidelines outlined by NIST, OMB, FISMA, etc; work face-to-face with multiple stakeholders through interviewing, planning, or participating in a team effort to bring multiple complex projects to fruition; conduct in-depth technical reviews of new and existing IT systems in order to identify the appropriate mitigation strategies required to bring these systems into compliance with established policy and industry guidelines; and analyze business models, workflows, and organizational dimensions as they relate to the design, implementation, and support of the information system.

REQUIRED EDUCATION:
Bachelor's degree in related field and 4+ years of related experience. Must have bachelor's degree or higher; no waivers accepted.

REQUIRED SKILLS:
Knowledge and hands-on experience with IT security architecture and design (firewalls, intrusion detection systems, virtual private networking, and virus protection technologies, LAN/WAN design, and general internetworking technologies), various operating systems and hardware, and basic programming and database training. Proficiency with advanced features of Microsoft Word 2003 and other Microsoft Office Suite 2003 applications including Outlook, PowerPoint, and Excel. Experience with Adobe Acrobat Professional. Excellent technical writing skills in the English language, excellent written and oral communication skills, desktop publication skills. Ability to work with minimal supervision, set priorities, and give attention to detail and quality, flexible, strong organizational and time management skills, ability to multi-task, ability to work individually and with a team, positive attitude, self-motivated, reliable, trustworthy, strong interpersonal skills, diplomacy, and ability to handle stress in professional manner. Professional business attire is required for client site work. The candidate must possess one or more of the following certifications: CISSP, CISA, CISM, GIAC, MCSE, CCNA, CCNP, GSSP, GPEN.

DESIRED SKILLS:
Knowledge of OMB A-130, FISMA, OMB Memos, Privacy Act of 1974, HIPAA, and Sarbanes-Oxley, and NIST Special Publications 800 series, and one or more of the following certifications: ITILv3, COBIT. Experience in the financial services market is beneficial but not required.

SECURITY CLEARANCE REQUIREMENTS:
U.S. citizen and High Public Trust clearance (6C).

WORK LOCATION:
Hyattsville, MD. Travel: 0-25%.

WORK HOURS:
Day shift, Monday though Friday, 40 hours/week.

Server Security Administrator , Washington DC

At least 5 years of experience in the field of Information Security with proven involvement in operations requiring for stringent uptime service levels. Experience in the following areas:
- Network Management and Security paradigms.
- Intimacy with UNIX, Windows and Linux hardware and software configurations.
- Relevant experience in environments supporting databases (Oracle and Sybase), including intimacy with DB concepts and operations.
- Problem analysis, systems analysis and user support.
- Some exposure to Disaster/Recovery and system backup disciplines.
- Practical experience with security tools (compliance monitoring, Scan Tools, IDS/IPS Systems, firewalls, etc.) and some exposure or knowledge of related technologies (PKI, SSO, Smart Cards, etc.)
Team player with strong technical and user support skills. Demonstrated ability to work under pressure, in a demand driven environment; Initiative, resourcefulness, flexibility in dealing with issues. Ability to prioritize workload and balance conflicting demands.
Determined team-work orientation as well as a balanced responsiveness to client needs and requirements; strong practical experience.
Willingness to work nights, weekends, and holidays on occasion to help mitigate crisis situations.
Excellent oral and written communication skills. Able to present and explain technical information to diverse types of audience (management, users, vendor, and technical staff).
 
Specific Requirements:
 
Detailed knowledge and experience on network or host based firewall configuration and management.
Proven ability to coordinate and manage multiple concurrent tasks.
Academic/professional training to at least a Bachelor's Degree or its international equivalent, preferably in Computer Science, Management Information, or Electrical Engineering. Strong practical experience may substitute for lack of some academic credentials.
Experience in ensuring security compliance.
Able to review security vulnerabilities and assess the real impact within the Bank?s environment.
CISSP certified or willing to obtain certification.

ISSO, Arlington VA

Job Description
Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Must be clearable to the Top Secret level. The ISSO is the principal point of contact for information assurance activities at the IT system level. The ISSO is responsible for ensuring that management; operational and technical controls for securing either National Security Systems or SBU level IT Systems are in place and are followed. This includes ensuring that appropriate steps are taken to implement information security requirements for IT systems throughout their life cycle, from the requirements definition phase through disposal. 1. Must develop and implement documentation outlining system operating environment, to include the overall mission, floor layout, hardware configuration, software, type of information processed, user organizations and security clearances, operating mode, interconnections to other systems/networks of users, their security personnel, and associated responsibilities; 2. Must understand software development lifecycle fundamentals and provide appropriate information security guidance to system owners of major applications and development environments 3. Must be familiar with development applications and development environments and understand risks and vulnerabilities as it relates to information security 4. Assist in the development of the overall system security document, the Information System Security Plan, which contains all necessary security procedures, instructions, operating plans, and guidance; 5. Participate in the development or revision of System-specific security safeguards and local operating procedures that are based on the above regulations; 6. Provide IT security consulting to system owners as to the other security documents, for example, security incident reports, equipment/software inventories, operating instructions, technical vulnerability reports, and contingency plans; and 7. Provide expertise in classified and unclassified ratings to customers. 8. Work closely with Certifiers to navigate the TSA Certification & Accreditation process and produce all appropriate accreditation documentation.
Required Skills
Requirements: Must possess 5 years of related security experience. Bachelor's Degree preferred. Must possess experience with FIPS 199 and NIST standards. It is preferred that this person be a current Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or possess a similar security professional certification. Strong relevant experience and education can substitute for these certifications. Strong communication, interpersonal and client-facing skills required.

C&A Consultant, Washington DC

We have a short term opportunity and need a couple of candidates for some C&A work in the DC metro area.

• Recertify and Reaccredit a portion of the Network for the client per FISMA requirements.
• The IT Security Specialist shall have six years of experience in the Federal and NIST based certification and accreditation process in accordance with NIST 800-37.
• Must have hands on experience with the following:
• Writing system security plan in accordance with NIST 800-18 Rev. 1.
• Developing Risk Assessment reports in accordance with NIST 800-30.
• Contingency Plan development and testing.
• Vulnerability scanners such as Nessus, WebInspect, AppDetective and/or ISS or Foundstone.
• Writing ST&E and conducting security test and evaluations for major applications and general support systems (GSS).
• Required certifications CISSP or CAP.

ArchSight Admin, Arlington VA

ArchSight Admin to work from Leesburg, CS bachelors, 5 years experience with Archsight, or 10 years total experience, Secret clearance.

Single Sign-on/CIdM Senior Business Analyst, Washington , DC

Description of Duties:

To support the requirements and project analysis of the Cyber Identity Management in the areas of capability, capacity, performance, use cases, and operations etc.


Activities include:

1) Collect business and technical requirements from all stakeholders and analyze requirements with architects and engineers to finalize the best approaches and solutions to implement an enterprise-wide Cyber Identity Management system including HSPD-12, PKI, Biometrics, and Single Sign-on services; 2) Ensure the solutions adhere to DHS Enterprise Architecture standards and other applicable DHS standards; 3) Help establish a framework to guide the design of the SSO/CIdM solutions and implementation approaches; 4) Ensure information assurance requirements, procedures, processes, techniques, and technologies are addressed and applied throughout the System Development Life Cycle, Systems Assurance process, IT architecture development process, Configuration Management, and IT operations processes and procedures; 5) Produce product-specific analysis and testing results documents and use cases; 6) Research, evaluate, acquire, implement, and integrate single sign-on security tools; 7) Understanding the nature of organizational systems and applications to determine the level of protection needed and the level of risk that can be tolerated; 8) Working with Program Offices and Other Components within ICE and DHS to ensure business requirements and processes are fully integrated into the CIdM design and implementation; 9) Conduct cost and ROI analysis to clearly demonstrate risks, benefits, and trade-offs to facilitate decision-making process; 10) Devise configuration management and maintain change control processes;


Qualifications:

1. Active DoD Secret clearance or above; preferably current DHS/ICE clearance

2. Over 10 years of experience in IT with at least 7 years specifically in the analyst role for project and/or business operations

3. Excellent understanding of project lifecycle management especially in the requirement collection, analysis, and maintenance areas

4. Excellent analytical skills with good understanding in project financial and return on investment analysis

5. Excellent writing, oral communication, and people skills

6. Excellent in mapping organization's missions, goals, and policies into strategies, plans, and tangible deliverables

7. Sensitive to organizational culture issues and is able to work through and out of the difference and produce results

8. Good understanding of the requirements of HSPD-12

9. General understanding of Cyber Identity Management based on Public Key Infrastructure (PKI) with its concept, lifecycle, applications, and operations

10. General understanding of the concept and technologies of Single Sign-on

11. Good understanding of federal Enterprise Architecture reference model

12. An independent thinker and self-motivated worker yet work well in a team-oriented environment


Clearances/Certifications necessary: US Citizen, Clearable for DHS Public Trust Clearance


Location: 1120 Vermont Avenue, Washington , DC 20005

Single Sign-on/CIdM Information Systems Security Officer, Washington , DC

Description of Duties:

To develop, implement, and maintain a Certification and Accreditation (C&A) program to support Cyber Identity Management (CIdM) systems and services.

Activities include:

1) Managing and mitigating risks associated with CIdM information systems; 2) Providing guidance and technical direction in support of risk management, certification and accreditation (C&A), FISMA, and various oversight audits; 3) Facilitating interactions with the appropriate DAA, ISSO, and other relevant parties, the risk management activities for CIdM Systems; 4) Preparing acceptable C&A documentation: System Security Plans (SSP), Risk Assessments, Security Operating Procedures or Guides, Security Test and Evaluations (ST&E) Test Plans (Pre-Operational and Operational), ST&E Test Plan Results Reports, Contingency Plans (CP), CP Test Plans and Results, Inter-Agency Security Agreements (ISA) and Rules of Behavior; 5) Preparing and submit Security Evaluation Reports (SERs) for Certification Official review and approval and submission to the appropriate DAA for the accreditation decision; 6) Provide expert Information Assurance (IA) input throughout the Systems Lifecycle Management (SLM)


Qualifications:

Required:

1. Active DoD Secret clearance or above; preferably current DHS/ICE clearance

2. Over 10 years of experience in IT with at least 5 years specifically in the Information Security area

3. Excellent understanding of the requirements, methodologies, documentation, and coordination of completing FISMA compliance by following NIST publications

4. Excellent understanding of how to integrate information security requirements into the System Development Lifecycle (SDLC) preferably by following NIST 800-64

5. Excellent writing and oral communication skills

6. Good understanding of Cyber Identity Management based on Public Key Infrastructure (PKI) with its concept, lifecycle, applications, and operations

7. Good understanding of the requirements of HSPD-12

8. General understanding of the concept and technologies of Single Sign-on

9. An independent thinker and self-motivated worker yet work well in a team-oriented environment

Desired:

1. CISSP certification desirable but not required.


Clearances/Certifications necessary: US Citizen, Clearable for DHS Public Trust Clearance

Location: 1120 Vermont Avenue, Washington , DC 20005

Team Size: 25 Team members

Start Date: ASAP

Duration: 6 months to permanent

Sr. Security Risk Analyst (x2), Washington , DC

JOB DESCRIPTION:

Scope: Responsible for verifying the integrity of compliance and oversight program duties, including risk management, certification and accreditation, vulnerability and threat analysis, FISMA compliance, and other security activities for a large scale Federal organization. Responsible for conducting evaluation and analysis of artifacts and conducting automated tests. Responsible for developing test scripts and implementing them for automated systems and general support systems. Ensures compliance with government and company security policies and procedures. Reviews and investigates non-compliance issues. Responsible for designing, developing or recommending integrated security system solutions that will ensure proprietary/confidential data and systems are protected. Coordinates the activities of a section or department with responsibility for results in terms of costs, methods used, and employees. Provides technical engineering services for the support of integrated security systems and solutions. Participates with the client in the strategic design process to translate security and business requirements into technical designs. Configures and validates secure systems and tests security products and systems to detect security weakness. Works on problems of diverse scope. May be responsible for the technical direction, leadership, and training of less experienced staff. Ensures project schedules and performance requirements are met. Contributes to the development of organization's goals and objectives. Regularly interacts with customer and/or functional per group managers. May interact with senior management. Interactions normally involve matters between functional areas, other company divisions or units, or customers and the company.

REQUIRED EDUCATION/SKILLS:

BS degree in Computer Science or related field plus 8+ years related work experience. Superior writing and analytical skills. Knowledge of Federal Government security management, operational, and technical requirements. U.S. Citizenship required and the ability to obtain and U.S. Public Trust Suitability and Top Secret Clearance.

DESIRED SKILLS:

Master's Degree, CISSP or equivalent certification.


Clearances/Certifications necessary: US Citizen, Clearable for DHS Public Trust Clearance


Location: 1120 Vermont Avenue, Washington , DC 20005


Start Date: ASAP

Sr. Security Policy Analyst

POSITION OVERVIEW:

Provide guidance and technical direction in support of the development and promulgation of IT Security policy and guidance and ICE Supplemental Guidance for SBU and NSS systems. Perform extensive review of IT security policy and system compliance with security certification and accreditation (C) requirements and NIST 800-53A Controls established by the DHS Chief Information Security Officer and higher authority. Evaluate new and proposed IT Security policy changes and ensure discussion among interested parties. Participate in ICE, DHS and other government working groups as appropriate and communicate all policy concerns to OCIO and IAD. Develop and maintain an extensive list of ICE waivers and exceptions as appropriate.

REQUIRED EDUCATION:

Bachelors degree or 6 years experience in lieu of degree and 8+ years related work experience.

REQUIRED EXPERIENCE:

Must have superior writing skills and excellent MS Project and Excel skills. Outstanding verbal communication skills are required and experience interviewing mid to senior level federal employees regarding detailed aspects of major IT program elements. Experience briefing senior personnel on a wide range of IT security policy issues and technologies. Demonstrated motivation to learn new skills and improve on existing ones while supporting a highly visible program within a major federal agency. Familiarity with established IT security principles and government documents and programs such as the Federal Information Security Management Act (FISMA), DITSCAP, NIACAP, DIACAP, and NIST accreditation requirements and guidelines. U.S. Citizenship is a must and the ability to obtain a U.S. Public Trust Suitability.

DESIRED SKILLS:

Experience working on DHS or other government contracts; active secret clearance is a plus.

Clearances/Certifications necessary: US Citizen, Clearable for DHS Public Trust Clearance

Location: 1120 Vermont Avenue, Washington , DC 20005

Team Size: 25 Team members

Start Date: ASAP

IDS Engineer (DC Gov)

JOB REQUIREMENTS

· Advanced Functional knowledge of network based and host based intrusion detection systems
· Advanced knowledge of NFR (Checkpoint), ISS Site Protector, Juniper, Snort and COTS Intrusion Detection Systems
· Knowledge of various protocols (HTTP, TCP/IP, UDP, FTP, ICMP, ARP, RIP, SMTP, BGP)
· Knowledge of tools and methods used by hacker/cracker community to comprise target systems
· Functional knowledge of best of breed Intrusion Detection and Prevention system technology
· Knowledge of Network Operations/ OSI model and TCP/IP stack
· Experience with Firewall technology/ Virtual Private Networking/ Routing and Switching
· Knowledge of UNIX/LINUX Operating System environment.

Minimum Requirement

- Bachelors degree in Computer Science or related field
- 5+ years of work experience in the IT Security industry.
- CCNP, CCIE, CEH, CISSP preferred.