Sr. IT Security Specialist_

Silver Spring

Job Location: S ilver Spring, MD

Job Description

Syneren is currently looking for an Sr. IT Security Specialist supporting a team of security experts and the ISSO / Federal customer with Assessment and Accreditation (A&A) functions and general IT Security support related to Federal Government compliance, continuous monitoring, and risk assessment.

Responsibilities:

· Certify IT systems for regulatory compliance and assist the system ISSO in Assessment and Accreditation (A&A) functions, security solution development, continuous monitoring, and FISMA Assessments for a local Federal Civilian Agency. Duties include assisting with and/or performing any or all of the following:

o Conduct Assessment and Accreditation (A&A) and perform all continuous monitoring functions and assist in maintaining Systems Authorization to Operate (ATO)

o Oversight and development of POA&Ms as part of the Assessment and Accreditation

o Audit compliance of security plans based on the National Institute of Standards and Technology (NIST) Security Publications

o Audit and provide guidance of security program that includes Governance (A&A, Continuous Monitoring, FISMA, NIST, DOC and NOAA policies and procedures)

o Use risk management techniques to develop and complete risk assessments based on NIST standards to ensure IA design sufficiently mitigates IA risk

o Conduct security tests and evaluations based on NIST 800-53/53A

o Possess detailed knowledge of handling various cybersecurity tools like Nessus, BigFix and SCAP.

o Prepare and analyze reports for Security Program as well as Governance

o Conduct vulnerability assessments

o Use proficient, clear and concise English written and verbal communication skills in order to interact with clients; communicate with individuals at various levels of expertise in subject areas of concern.

· Perform Project Management functions as and when required, and assume responsibility for the successful management of a team of IT security professionals, while servings as the senior IT Security Specialist in a functional role

· Collect and aggregate input to generate weekly and monthly progress reporting for the government lead

· Perform as team player and facilitate any team assignment that requires assistance.

Required Qualifications:

· Active Public Trust Clearance

· BS in Computer Science, Computer Security, Cyber Security, Information Technology, Software Engineering, or other related discipline preferred

· 5 years of experience related to FISMA and IT Security and at least over 8 years of IT support such as system and/or network administration, DBA, and/or programming

· Must be proficient with all common operating systems and network technologies (Windows, UNIX, Linux, Cisco IOS) and common security tools and scanners, such as Tenable Nessus

· Must have experience preparing NIST-based Assessment and Authorization documentation/package, be able to analyze and evaluate system scan results and data from a security and risk perspective and provide effective mitigation recommendations

· Must have knowledge of the NIST 800 series publications, FIPS 199, FIPS 200, and the NIST Risk Management Framework (RMF)

· Must have the ability to work independently under aggressive timelines

· Must be an efficient, positive, results-driven, problem-solving, team player

· Must have good verbal and written communication skills, to include briefing skills

· Must be able to pass a full background investigation and obtain a security badge to enter the applicable government facility

· Applicants must be ISC2 Certified Information System Security Professional (CISSP)

· Applicants must have one of the following certifications:

o CompTIA A+

o CompTIA Network+

o CompTIA Security+

o GIAC Certified Incident Handler (GCIH)

o GIAC Security Essentials Certification (GSEC)

o GIAC Security Expert (GSE)

o GIAC Information Security Professional (GISP)

o GIAC Security Leadership Certification (GSLC)

o ISC2 Certified Authorization Professional (CAP)

o ISC2 Certified Information System Security Professional (CISSP)

o ISC2 System Security Certified Practitioner (SSCP)

o ISC2 Certified Information System Security Associate (CISSA)

o ISACA Certified Information System Manager (CISM)

Preferred Qualifications:

· Certified Information Systems Auditor (CISA)

· GIAC Systems and Network Auditor (GSNA)

· Electronic Commerce Council Certified Ethical Hacker (CEH)

About Syneren: Syneren is an award winning, CMMI Level 3 certified, high quality provider of technology solutions for the government as well as commercial sectors. Founded in 2003, we have been broadening our services to cover an array of disciplines, including Hardware and Systems Engineering, Software Development and Testing, IT Systems Support, Cyber Security, Independent Testing and Evaluation and Program Support. Notably our innovative and effective solutions are delivered consistently by a highly qualified staff and management team. Syneren is committed to providing exceptional solutions that meet the client mission needs.

Thank you for your interest in Syneren Technologies Corporation. Syneren Technologies Corporation is an Equal Opportunity/Affirmative Action Employer. This business uses E-Verify in its hiring practices to achieve a lawful workforce. E-Verify® is a registered trademark of the U.S. Department of Homeland Security. www.dhs.gov/E-Verify