Description

Position is contingent upon contract award and funding.

Sev1Tech is looking for a Senior Cybersecurity Internal Controls Administrator (Information Assurance Engineer - Senior) will provide comprehensive support in accordance with DoDI 8500.01, DoDI 8510.01, and AR 25-2.

The responsibilities include but are not limited to:

• Providing Enterprise eMASS and RMF services, including developing RMF packages, maintaining asset lists and categorizations, and scheduling and coordinating system validation reviews
• Generate artifacts to support control compliance, review ACAS and STIG reports, and coordinate remediation efforts
• Creating, tracking, and maintaining Plan of Action Milestones (POA&M), performing annual security reviews, participating in Continuity of Operations (COOP) and Incident Response testing, and maintaining Army PPSM and Circuit Registry records
• Participate in SW Assurance reviews to ensure ongoing items are appropriately documented via eMASS POA&M

• Active DoD Secret Security Clearance
• Cybersecurity Certification (such as Certified Information Systems Security Professional (CISSP)/Information Systems Security Engineering Professional (ISSEP)/Security+/Certified Ethical Hacker (CEH/etc.)
• Minimum 10 years' experience with Cybersecurity and RMF related areas
• Extensive experience with Enterprise eMASS and RMF services
• Proficiency in developing RMF packages and maintaining asset lists and categorizations
• Ability to schedule and coordinate system validation reviews
• Experience generating artifacts to support control compliance
• Knowledge of ACAS and STIG reports and coordinating remediation efforts
• Experience creating, tracking, and maintaining Plan of Action Milestones (POA&M)
• Ability to perform annual security reviews
• Participation in Continuity of Operations (COOP) and Incident Response testing
• Ability to maintain Army PPSM and Circuit Registry records
• Participation in SW Assurance reviews and documenting items via eMASS POA&M
• Experience with security compliance and control documentation

• Bachelor's degree in Computer Science or equivalent years of experience
• Familiarity with DoDI 8500.01, DoDI 8510.01, and AR 25-2
• Strong analytical and problem-solving skills
• Excellent communication and coordination skills
• Experience with Army enterprise monitoring tools and practices
• Knowledge of security regulations and best industry practices
• Ability to work effectively in a team environment and collaborate with various stakeholders
• Experience with incident response activities
• Understanding of Continuity of Operations Plans and Communication Plans

PI283058749