What are the responsibilities and job description for the Sr. Cyber Security Analyst/Information Security Manager with TS Clearance position at BTI?
Business Technology Integrators (BTI) is a Government Contracting Company located in Upper Marlboro, MD. We are seeking an experience Sr. Cyber Security Analyst/Information Security Manager This position requires a TS Clearance. Position will be located in Washington DC or Germantown MD.
Experience:
Individual must demonstrate a minimum of five (5) years of experience in planning, coordinating, and implementing security measures to protect the confidentiality, integrity, and availability of information systems and their data.
Individual must also have a minimum of two (2) years supervising experience in a cyber/IT security role.
Individual must demonstrate proficiency in developing, monitoring and conducting testing of cybersecurity plans and controls using government approved tools and methods.
The individual will document test results, develop and recommend corrective actions, and develop and document residual risk and risk assessment statements.
Individual must have a thorough understanding of cyber policies/practices to include National Institute of Standards and Technology Special Publications.
Individual requires extensive knowledge of security assessment and authorization (SA&A) policy, procedures, and processes, including, but not limited to, NIST 800-37, 800-53, CNSSI and other Federal requirements.
This individual must demonstrate proficiency in developing and revising EHSS Security Policies (for example, EHSS Privacy Plan, EHSS Configuration Management Plan, etc.).
This individual must also be able to create baseline documentation and develop and review policies for EHSS.
This individual must be knowledgeable in Incident Response practices, vulnerability management, Plan of Action and Milestone management, Zero Trust Architecture, cloud requirements and assessments, Continuous Diagnostics Mitigations/Continuous Monitoring, etc.
Individual must demonstrate a minimum of five (5) years of experience in planning, coordinating, and implementing security measures to protect the confidentiality, integrity, and availability of information systems and their data.
Individual must also have a minimum of two (2) years supervising experience in a cyber/IT security role.
Individual must demonstrate proficiency in developing, monitoring and conducting testing of cybersecurity plans and controls using government approved tools and methods.
The individual will document test results, develop and recommend corrective actions, and develop and document residual risk and risk assessment statements.
Individual must have a thorough understanding of cyber policies/practices to include National Institute of Standards and Technology Special Publications.
Individual requires extensive knowledge of security assessment and authorization (SA&A) policy, procedures, and processes, including, but not limited to, NIST 800-37, 800-53, CNSSI and other Federal requirements.
This individual must demonstrate proficiency in developing and revising EHSS Security Policies (for example, EHSS Privacy Plan, EHSS Configuration Management Plan, etc.).
This individual must also be able to create baseline documentation and develop and review policies for EHSS.
This individual must be knowledgeable in Incident Response practices, vulnerability management, Plan of Action and Milestone management, Zero Trust Architecture, cloud requirements and assessments, Continuous Diagnostics Mitigations/Continuous Monitoring, etc.
Requirements:
Education:
Bachelor's Degree from an accredited University or College in Information Technology with an emphasis in Cyber Security or Information Assurance or similar degree.
Certifications:
GIAC Information Security Professional (GISP), ISC2 Certified Information Systems Security Professional (CISSP) or equivalent
Education:
Bachelor's Degree from an accredited University or College in Information Technology with an emphasis in Cyber Security or Information Assurance or similar degree.
Certifications:
GIAC Information Security Professional (GISP), ISC2 Certified Information Systems Security Professional (CISSP) or equivalent