Job Description 

• Working with the application leads, sysadmins, dbas, developers and testers to ensure the assigned systems are security compliant and achieve/maintain ATO.
• This includes following the RMF process for full test, partial test, CONMON and no test.
• Updating Xacta documentation including SSPs, SCTM, STPs and POAMs.
• Loading artifacts such as STIG checklists and ACAS scans.
• Helping to implement STIG checklists and mitigate scan findings.
• Answering questions to ensure systems are developed with security compliance built in.
• Supporting security assessment events and responding to all questions from PAT team, ISSMs and SCAs.

Education and Experience

• Bachelor's degree in computer science, software engineering or field applicable to the position required.
• 9 or more years of relevant experience required with a Bachelor’s. Additional experience may be considered in lieu of degree.
• May substitute relevant experience for relevant education: High School with 13 years; Associates with 11 years; Master’s with 7 years; PhD with 5 years.

Required Skills 

• Xacta experience.
• Demonstrated experience in developing, implementing, and enforcing security policies, standards, and procedures to ensure regulatory compliance and protect organizational information assets.
• Proven track record in conducting risk assessments and identifying vulnerabilities in systems, networks, and applications.
• Experience in developing and overseeing implementation of mitigation strategies to reduce security risks.
• Strong background in monitoring systems and networks for security breaches and suspicious activity.
• Successful history of responding to security incidents, investigating root causes, and implementing corrective actions.

Desired Skills 

• Comprehensive knowledge of relevant laws, regulations, and industry standards.
• Experience conducting audits and assessments to verify adherence to security requirements.