Software Security Specialist
VA - Arlington
As a Software Security Specialist, you will serve in an ISSO capacity and provide general technical engineering support in software accreditation processes, such as: performing the necessary XACTA updates; supporting SAI Engineers in reviewing and updating accreditation documentation (e.g., STIGS); completing and attaining Privilege User Access, and achieving the ability to operate/use SAI software Cortex EIP/Cortex Edge at Level One competency within 60 days of hiring while demonstrating the ability to collaborate with the team and work quickly and independently to perform these tasks.
Additionally, your duties and responsibilities include but are not limited to:
- Applying professional experience with cloud services like Azure or Amazon Web Services
- Applying professional experience in creating and maintaining software security-related documentation
- Applying professional experience with US Government (USG) information technology security policies and procedures FISMA, NIST, USG security best practices
- Applying professional experience supporting government accreditation
- Applying professional experience supporting installation, maintenance, and optimization of complex software architecture
- Applying professional system administration experience on unclassified and classified USG systems
- Demonstrating your ability to solve a variety of problems & shift priorities quickly
- Demonstrating your strong task management skills, including being able to complete a goal from start to finish with little supervision
- Demonstrating strong interpersonal skills, including being able to effectively interact with and communicate to all levels of staff (verbally and in writing)
- Presenting a cooperative and service-oriented attitude while being able to work under pressure and maintain a professional demeanor
- Other related duties and requirements as needed
Minimum Qualifications:
- Active TS/SCI
- CI Poly or ability to gain one
- IT-related bachelor degree
- At least 5 year’s experience
- Must possess minimum certification of IASE Level II under DOD 8570 requirements (Security+).
- Ability to install, configure, troubleshoot, and harden information systems on Linux operating system.
- Knowledge of Risk Management Framework (RMF) and NIST SP 800-53.
- Experience preparing System Security Plans (SSPs), Security Controls, System Test Plans (STP) Plans of Actions and Milestones (POAM), and other associated Body of Evidence documentation for systems to obtain Authority to Operate (ATO) status.
- Ability to analyze Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP) and Assured Compliance Assessment Solution (ACAS) scanning results.
- Ability to remediate findings from vulnerability and risk assessments.
Preferred Qualifications:
- Java or programming language experience.
- Experience with XACTA and eMASS.
As a Software Security Specialist, you will serve in an ISSO capacity and provide general technical engineering support in software accreditation processes, such as: performing the necessary XACTA updates; supporting SAI Engineers in reviewing and updating accreditation documentation (e.g., STIGS); completing and attaining Privilege User Access, and achieving the ability to operate/use SAI software Cortex EIP/Cortex Edge at Level One competency within 60 days of hiring while demonstrating the ability to collaborate with the team and work quickly and independently to perform these tasks.
Additionally, your duties and responsibilities include but are not limited to:
- Applying professional experience with cloud services like Azure or Amazon Web Services
- Applying professional experience in creating and maintaining software security-related documentation
- Applying professional experience with US Government (USG) information technology security policies and procedures FISMA, NIST, USG security best practices
- Applying professional experience supporting government accreditation
- Applying professional experience supporting installation, maintenance, and optimization of complex software architecture
- Applying professional system administration experience on unclassified and classified USG systems
- Demonstrating your ability to solve a variety of problems & shift priorities quickly
- Demonstrating your strong task management skills, including being able to complete a goal from start to finish with little supervision
- Demonstrating strong interpersonal skills, including being able to effectively interact with and communicate to all levels of staff (verbally and in writing)
- Presenting a cooperative and service-oriented attitude while being able to work under pressure and maintain a professional demeanor
- Other related duties and requirements as needed
Minimum Qualifications:
- Active TS/SCI
- CI Poly or ability to gain one
- IT-related bachelor degree
- At least 5 year’s experience
- Must possess minimum certification of IASE Level II under DOD 8570 requirements (Security+).
- Ability to install, configure, troubleshoot, and harden information systems on Linux operating system.
- Knowledge of Risk Management Framework (RMF) and NIST SP 800-53.
- Experience preparing System Security Plans (SSPs), Security Controls, System Test Plans (STP) Plans of Actions and Milestones (POAM), and other associated Body of Evidence documentation for systems to obtain Authority to Operate (ATO) status.
- Ability to analyze Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP) and Assured Compliance Assessment Solution (ACAS) scanning results.
- Ability to remediate findings from vulnerability and risk assessments.
Preferred Qualifications:
- Java or programming language experience.
- Experience with XACTA and eMASS.
