Role: Information Security Specialist – Associate
Location: Fort Knox, KY OR Remote
Education/Certifications: BA/BS preferred; IAT Level I; Computing Environment Certification
Years of Experience: Less than 5
Clearance Level & Investigation: Secret
IA Cert Level (DoD 8570.01): IAT Level I (Security+, CND, CCNA-Security, or SSCP recommended)
Computing Environment Certifications: Required
Job Description:
Qualifications:
- Assists in developing and maintaining knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain security policies and standards, and ensure compliance throughout organization.
Specific Responsibilities:
- Conducts and supports Traditional Security Reviews (assessments, evaluations, audits) as required and determined by Cybersecurity.
- Identifies and makes on-the-spot corrections to deficiencies and educates the user on current security standards/requirements IAW current cyber guidelines and DoD compliance standards.
- Provides surge support, technical guidance, and expertise in the areas of Cybersecurity to support Customer, Mission Partners, IMOs, ISSOs, IS Owners, Software Developers, Network System, and Database Administrators IAW all related cyber regulations and directives; provide results in reports, briefs, and deliverables as required to the appropriate Government representative.
- Provide Cybersecurity surge support in the event of real world or additional requirements in support of RMF compliance checks and documentation review across authorization boundaries, including, but not limited to:
- Perform security review preparation for all security controls associated with RMF applicable to an assigned authorization boundary based upon the Confidentiality, Integrity, or Availability designation.
- Perform on site or off-site reviews of all information systems to audit and validate compliance with associated security controls.
- Perform as reviewers of audit teams during inspections, assessments, evaluations, audits, etc.
- Provide reports to the assigned Government representative as required.
- Provide reviews, validation, and deliverable efforts in support of compliance or non-compliance IAW CCI, STIGs and SRGs for each finding or vulnerability IAW RMF.
- Provide embedded Cybersecurity support across Customer or other supported organizations as required.