|
R4 Communications is looking for qualified and talented individuals to join its team. If you are interested in a career with R4Communications, please e-mail your resume to opportunities@r4communications.com.
Please take a look at our current positions:
An experienced information technology security professional is needed to contribute to independent validation and verification (IV & V) program for large federal government agency.
Using formal security management knowledge and skills, as well as experience in managing IT security infrastructures, the successful candidate will develop and execute procedures required to validate and verify the security mechanisms utilized by the agency’s outsourced IT contractors.
Specific Duties:
- Consult on the C&A process, including the preparation of certification documents, the ST&E methodology, and the manner in which C&A ties back to FISMA, OMB, and other high level guidelines.
- Conduct vulnerability assessments on various types of networks and topologies.
- Analyze output from network vulnerability assessments and recommend mitigation strategies.
- Review and provide feedback on security plans and procedures regarding all aspects of LAN, WAN, or MANs as applicable.
- Review and provide input into network designs to ensure compliance with security and enterprise architecture.
- Assist in designing, establishing, and maintaining security products to include firewalls, intrusion detection systems, antivirus, patch management, etc.
- Perform scans on all types of systems – Windows, Solaris, Linux.
- Review logs from devices and make recommendations for risk mitigation.
- Provide input and visibility into emerging security technologies, deployment strategies, and other security protocols to ensure awareness within the OCISO.
Additional Duties:
- Validation of security plans, as well as verification of results generated from certification, accreditation, testing, and audit activities.
- Coordination of security related projects and exchange of necessary information between sub-organizations of the agency and agency contractors.
- Development of IV&V program activities and identifications of resources to match customer security needs.
Qualifications
Education
B.S. degree in computer science or a related technical field. Certification as a System Security Professional (CISSP, CISM, or other) is desirable.
Experience
Three (3) to five (5) years of security experience in Certification and Accreditation and system security testing (ST&E) of Federal Government Systems; or IT testing; or IT audit; or IT architecture. Familiarity with Federal systems; NIST guidelines; C&A; ST&E; or system audit. Related network and/or systems engineering or administration is a plus. Good written and verbal communication skills required.
Additional Requirements
Candidates for this position must be:
- US Citizen
- Eligible for security clearance
Location: Project in Rockville, Maryland |
