• Develop RMF security documentation (i.e., System Security Plans (SSP), Security Control Traceability Matrix (SCTM), Incident Response Plans (IRP), Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acceptance Memorandums, Continuous Monitoring (CONMON) Plans, Configuration Management Plans (CMP), Contingency Plans (CP), and Plan of Action and Milestones (POA&M) reports that support the Assessment and Authorization (A&A).
• Experience developing Security Control Assessment (SCA) artifacts, including the Security Assessment Plan (SAP), Security Assessment Reports (SAR), and System Security Plan (SSP).
• Experience developing Plans of Action and Milestones (POA&Ms), including providing risk mitigation strategies, steps, and milestone.
• Review system scans/tests using the Security Content Automation Protocol (SCAP) Compliance Checker (SCC), and the Assured Content Assessment Solution (ACAS).
• Working with engineers to ensure vulnerabilities are addressed within 30 days of their discovery date and track vulnerabilities until closure (POA&M, patching, etc.).
• Evaluates the security controls within the enterprise to identify vulnerabilities and compliance issues; recommend actions to correct problems.
• Experience in mapping security controls within eMASS and addressing controls that are related to STIGs.
• Perform System Impact Assessments.
• Experience with XACTA. cyber risk management solution suite for continuous security risk assessment and compliance automation and management.
• Knowledge of vulnerability scoring systems (CVSS/CMSS)
• Create /Manage Nessus dashboards, deploy /manage Nessus Agents, deploy/mange Nessus Network Monitor (NNM).
• Experience or have knowledge of using tools such as HBSS, Splunk, and other tools to assist with performing tasks related to A & A.
• knowledge of integrating Nessus with Splunk a plus.
• Working knowledge of the NIST 800 series publications to include but not limited to: 800-30, 800-53a, SP 800-137, SP 800-171, and SP 800-37, DoDI 8500.01, and DoDI 8510.01
• IAM Level III certification required.
• Experience working with Tenable Security Center and Tenable Nessus agents desired.
• Experience with general RHEL administration and troubleshooting.
• Experience working with multiple network security zones, subnetting, VRFs, and VLANs
• Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings.
• Strong analytical and troubleshooting skills.
• Experience as a Navy Qualified Validator or Fully Qualified Navy Validator desired.
• ITIL Foundations certification desired
• Must possess an active TS/SCI clearance with SCI eligibility.
• Must have a current DoD 8570.1-M IAT Level II certification (i.e., Security CE)
• Requires 5 to 8 years with BS/BA or 3 to 5 years with MS/MA or 0 to 2 years with PhD.

BA Global Talent is a young, fast-growing company that strives to provide high-quality remote and US-based workers to US clients. BA was founded by a lawyer and a business administrator who harnessed their expertise and relevant local experiences to ensure that demanding employers can find high-quality, remote workers to help their businesses grow.