Senior Cybersecurity Specialist (ISSO and Assessor)

Edgewater Federal Solutions is hiring a Senior Cybersecurity Specialist (ISSO and assessor) to provide high level of technical advice and guidance to management and other technical specialists on critical IT security issues; Create and maintain system security documentation; Conduct technical risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs and conduct systems security evaluations, audits, and reviews; Apply FISMA, NIST, CNSS and Federal agencies guidance for security control policies and procedures. Position requires consistent exercise of discretion and judgment. This position is HYBRID and supports The Department of Energy in Germantown, Maryland. Responsibilities Responsibilities include, but are not limited to the following: Act as an advisor on all matters, technical and otherwise, involving the security of information systems under purview. Develop all required cybersecurity documentation including but not limited to system security plans, privacy impact assessments, contingency plan/business impact assessments, security categorizations, and incident response plans. Work with the Information Systems Security Manager (ISSM) to obtain and maintain the system’s Authority To Operate (ATO). Provide guidance to system administrators and system owners on adherence to applicable requirements for maintaining security posture of authorized systems. Interpret Federal and Departmental guidance to develop security operating policies and procedures to protect networks, and other sensitive information. Conduct assessments of information systems in adherence to FISMA, FIPS, CNSS and NIST requirements. Perform analysis of vulnerability scan results and assist application teams in addressing findings within the organization’s required timeframes. Provide guidance and develop an organizational wide Continuous Monitoring Program policy and procedures. Provide guidance and assistance to system administrators and system owners on adherence to Continuous Monitoring Program policy and procedures and setting up continuous monitoring tools. Provide Configuration Management (CM) oversight for information system security software, hardware, and firmware; Manage changes to systems and perform assessments on the security impact of the changes; Perform risk assessments and analysis in support of ongoing awareness and adherence to the organization’s risk tolerance. Anticipate security requirements and identify sound security controls for applications, systems, and processes. Research and when necessary, publish and distribute notifications which address major information security threats, i.e. hacking, malicious activity, damaging vulnerabilities with active exploits in the wild, Trojans, Worms, Viruses, Malware, etc. Responsible for providing guidance, assistance, and validation of completion of POA&M items. Perform other tasks as assigned. Qualifications US Citizenship Required 10+ years of relevant progressively increasing cybersecurity experience Ability to communicate with other team members effectively and clearly on technical information related to information systems’ design and implementation with regards to cybersecurity. Extensive knowledge of information technologies to include computer hardware and software focusing on new communication protocols and transceivers, operating systems, networking protocols, cloud-based security issues and terminology Direct experience with FISMA and the Security Assessment and Accreditation (SA&A) process. Experience with accrediting systems that have an Oracle or SQL backend. Hands on experience operating scanning tools such as Nessus, Netsparker, etc., must have ability to set up and maintain tools. Experience as a leader in continuous monitoring programs, to include familiarity with monitoring tools such as Carbon Black or Forescout. Familiarity with assessing AI applications and/or acting as an ISSO for AI application Education/Qualification Required A bachelor’s degree in Cybersecurity, Computer Science or other relevant field of study. Be eligible to obtain a Federal Security Clearance at the Q level. Any equivalent combination of experience and training that provides the required knowledge, skills, and abilities. CISSP, CISM, CEH, SSCP, SANS GIAC, or other certification is strongly desired, but not required.  Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee may be regularly required to stand, sit, talk, hear, reach, stoop, kneel, and use hands and fingers to operate a computer, telephone, keyboard, and standard office equipment. Specific vision abilities required by this job include close vision requirements due to computer work. The employee must occasionally lift and/or move up to fifteen (15) pounds. Fine hand manipulation (keyboarding). Salary: $140,000.00 - $170,000.00 Additional benefits include: Paid Time Off & Holiday Pay Medical Insurance Dental Insurance Vision Insurance Disability, Life Insurance, and AD&D Flexible Spending Accounts Pre-Tax 401K and/or After-Tax Roth IRA (with employer matching contribution) Tuition and Technical Training Reimbursement Exercise Reimbursement Computer Reimbursement Employee Assistance Program Working at Edgewater Federal Solutions: Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Companies since 2018. Edgewater Federal Solutions is an Equal Opportunity Employer. It has been and continues to be our policy to provide equal employment to all employees and applicants for employment without regard to race, color, religion, gender, national origin, age, disability, marital status, veteran status and/or other status protected by applicable law.