Job Description

Requires skills to assess, plan, and enact security measures to help protect an organization from security breaches and attacks on its computer networks and systems. Be able to identify vulnerabilities, interpret the test results of commonly used software to help protect the organization’s data, and help users adhere to new regulations and processes to ensure the network stays safe. Work as an intricate part of an IT department for various organizations. Capacity to use critical thinking with excellent attention to details to find new ways to resolve issues. Possess the ingenuity to find new ways to improve current systems and networks within the organization. The CSA is to provide technical analysis for IA/CS support and integration efforts. The CSA will perform in-depth analysis in various areas and technologies for RMF Assessment and Authorization (A&A)

• Policy Development & Enforcement: Developing, enforcing, and documenting comprehensive security policies, procedures, and architectural rules (e.g., for Zero Trust implementation).
• Risk Management: Leading the identification, assessment, and mitigation of risks to sensitive data and critical infrastructure.
• Compliance & Auditing: Ensuring all information systems comply with relevant regulatory standards and industry best practices, such as the DoD Risk Management Framework (RMF), NIST standards, HIPAA, or PCI DSS.
• Vulnerability Analysis: Performing high-level vulnerability assessments and security audits to pinpoint weaknesses in systems and recommending solutions.
• Incident Response & Disaster Recovery: Planning for and, in some cases, leading the response to security incidents to minimize impact and ensure business continuity.
• Cross-Functional Leadership: Collaborating closely with IT, cybersecurity, and senior management teams to align security goals with business objectives and report on the organization's risk posture.
• Advanced knowledge of security principles, practices, and procedures.
• Expertise in risk assessment and management principles.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills for collaborating across departments and presenting to senior leadership.
• Familiarity with compliance frameworks (NIST, RMF, DISA STIGs).
• Leadership and mentoring abilities.
  

Required Skills and Experience:

• 7+ years of directly related experience in IT/IA Engineering OR Bachelor’s degree in related discipline with 8+ years of equivalent experience
• Must meet the DoD 8570 standard for an IAM 3
• CISSP certification required
• Must be a U.S. citizen
• A secret security clearance

Degree Requirements:

• Bachelor's degree and a minimum of 7 years of relevant experience.
  OR
  10 years of experience.