• Proven experience in implementing the government RMF process and preparing ATO documentation.
• In-depth knowledge of security frameworks, standards, and guidelines (e.g., NIST SP 800-53, FISMA, FedRAMP).
• Strong understanding of network and system security principles, protocols, and technologies.
• Experience with security assessment tools, vulnerability scanners, and penetration testing techniques.
• Familiarity with incident response procedures and analysis.
• Excellent communication skills, with the ability to effectively communicate complex security concepts to technical and non-technical stakeholders.
• Strong analytical and problem-solving skills, with the ability to prioritize and manage multiple tasks.
• Responsible for conducting threat and risk analysis and analyzing the operational impact of new and existing systems and technologies to eliminate risk, performance, and capacity issues.
• Implements vulnerability assessments and configures audits of operating systems, web servers, and databases; and detects patterns, unsecure features, and malicious activities in the infrastructure.
• Performs research, testing, evaluation, and deployment of security technology and procedures and runs diagnostics on changes to data to verify undetected breaches.
• Develops custom systems for specialized security features and procedures for software systems, networks, data centers, and hardware.
• Develops and implements information security standards, guidelines, and procedures and develops firewalls to secure the network infrastructure.
• Maintains an awareness of new intrusion methods and develops Protection Plans.
• Conducts counteractive protocols and reports incidents.
• Offers customized risk ratings for vulnerabilities based on company policies and maintains IT security controls documentation.
• Manages relationships, and coordinates with customers and service providers while providing customized security assessments, implementing security policies, designing security training materials, organizing training sessions, providing technical support, and communicating security policies and procedures.
• Responsible for supervising and mentoring subordinate project and team staff.

Certifications: Relevant certification: CISSP, CISM, or CEH.

Minimum Years of Relevant Experience:

• A bachelor's degree and nine (9) or more years of experience in programs and contracts of similar scope, type, and complexity is required.

Education Level & Degree Required:

• Bachelor's degree in computer science or related discipline from an accredited college or university is required. HS and 13 years of experience; Associates and 11 years of experience. A candidate holding a relevant master's degree may be granted 2 years’ experience credit for that extra education. A candidate holding a relevant PhD degree may be granted 4 years’ experience credit for that extra education.