What are the responsibilities and job description for the Assessment and Authorization Specialist SAI306 position at Sabree Software Services?
Job Description
The Contractor shall concentrate on overall technical and operational effectiveness of capabilities in coordination with the designated Sponsor Staff management. The Contractor shall maintain and make accessible documentation of all operational and business process activities in the form of Standard Operating Procedures (SOP). The Contractor shall be responsible for assisting and maintaining a formal Information Security Program with their stakeholders. The Contractor shall monitor and track projects in the A&A queue. The Contractor shall analyze SSPs to develop an understanding of the customer systems and applications. The Contractor shall coordinate A&A actions and system testing with appropriate security personnel. The Contractor shall develop risk assessment, recommend mitigating countermeasures, and write short, succinct risk assessment and certification reports for submission to the Chief Information Officer. The Contractor shall act as A&A project register. The Contractor shall manage the A&A registration process. The Contractor shall monitor and track projects in the A&A queue. The Contractor shall maintain a document repository where A&A project documentation is stored and record and register actions concerning project approvals to operate in the A&A database. The Contractor shall assemble and submit A&A packages to the Principal Accreditation Authority or Designated Accreditation Authority.
The Contractor shall support the Sponsor’s product selection process, approving product changes and modifications. The Contractor shall review and approve product requests for procurements to ensure it meets the Sponsors security requirements. The Contractor shall engage in technical meetings during the Sponsor’s project engineering process to provide security guidance in terms of policy and technical implementation of those policies. The Contractor shall produce and assist with production of technical artifacts required for A&A packages such as write documentation like System Security Plan, Audit Strategy, Configuration Management Plan, Security controls traceability Matrix, Project Plan of Action and Milestones. The Contractor shall monitor and address cyber risks such as malware, zero-day attacks, denial of service attacks, as well as associated mitigations regarding computer and network devices.
Required Skills
1. Bachelor’s Degree in management information systems, information assurance, computer engineering, or other closely related IT and Cyber Security discipline or equivalent work experience.
2. Demonstrated experience in the Risk Management Framework (RMF) methodology.
3. Demonstrated experience managing document repositories and databases.
4. Demonstrated experience in the use of process tracking and document control software.
5. Demonstrated experience with writing, communications, and briefing skills.
6. Demonstrated experience with technical guidance and oversight both to technical and non-technical, senior level personnel.
7. Demonstrated experience organizing, planning and prioritizing multiple tasks to complete work on schedule.
8. Demonstrated experience in INFOSEC policies, regulations, and guidance’s.
9. Demonstrated experience with cyber risks such as malware, zero-day attacks, denial of service attacks, as well as associated mitigations regarding computer and network devices.
10. Demonstrated pattern of excellent customer service skills and the ability to collaborate with customers at all levels.
Desired Skills
1. Demonstrated experience with the Sponsor’s A&A process.
2. Certified Information Systems Security Professional (CISSP).
3. Demonstrated knowledge of the Sponsor’s standard project cycle.
4. Demonstrated experience with the Sponsor’s diverse information technology infrastructure including operating systems, major application systems, and network architecture.
About Sabree Software Services
Sabree Software Services, Inc. (S3) is a full-service software firm headquartered in Northern Virginia. We support the federal government and commercial arenas by providing high quality, system / software architecture design, full-lifecycle / full-stack software development services, usability engineering, testing, and project management services. Our team is comprised of an elite network of engineers, with advanced degrees, who have been providing technical services to our customers and partners in the DC metropolitan area for over 20 years. We are committed to delivering innovative, multidisciplinary solutions in an agile fashion.
