Requirement For Sr. Security Assessor

<p>Role: Senior Security Assessor -FAA</p><p>Location: Washington, D.C</p><p>Duration: 3+ years </p><p>Must also possess: </p><p>1. Direct experience in NIST security control assessments</p><p>2. Direct experience in System Security Plan (SSP) development</p><p>3. Direct experience conducting or supporting NIST-based risk assessments</p><p>4. Demonstrated success interfacing directly with system owners and executive management levels</p><p>5. Demonstrable excellence in written and verbal communications (samples may be requested)</p><p>6. A demonstrated consulting mentality, and the professional habit of treating all others as direct customers </p><p>7. Demonstrable understanding of basic Information Technology (IT) concepts (such as networking, access control, server functions), as well as cloud concepts</p><p>8. Demonstrable understanding of privacy concepts as they apply to security assessment as outlined in NIST’s appendix “J” of 800.53</p><p>9. The ability to conduct the following tasks without supervision:</p><p>• Conducting Security Control Assessments and testing</p><p>• System Security Plan (SSP) Review, Evaluation, Creation</p><p>• Plan of Action and Milestones (POA&amp;M)</p><p>• Conducting Risk Analysis</p><p>• Conducting Risk Assessments</p><p>• Security Assessment Report (SAR)</p><p>• Risk Assessment Report (RAR)</p><p>• SA&amp;A or Security Assessment and Authorization (or C&amp;A)</p><p>• Contingency Plan Development or Evaluation</p><p>10. Secondary (search terms) areas of interest for this role:</p><p>• FedRamp </p><p>• CSAM </p><p>• FISMA </p><p>• NIST</p><p>• HP Webinspect</p><p>• McAfee Vulnerability Manager</p><p>• SCD</p>