IT Security Specialist Iv - Washington, United States - RCG Inc

RCG Inc

Verified Company

Washington, United States

2 weeks ago

Posted by:

Mark Lane

beBee recruiter

Description

RCG is a growing federal contracting company and Certified as a Great Place to Work. We are looking for strongly qualified people to help support our clients.

We are currently seeking an
IT SECURITY SPECIALIST IV to support a current proposal effort with our customer located in Washington, DC (with an additional location in Hillcrest Heights, MD).

Responsibilities include, but are not limited to:

Participate in the assessment of low, moderate, and high impact information systems to include Cloud service offerings.
Complete comprehensive test plans for identified security controls following NIST 80053a, Federal Risk and Authorization Management Program (FedRAMP) guidance, and/or agencyspecific guidance.
Produce complete, accurate, and timely findings reports using client defined templates.
Review and analyze needed updates to existing set of security documents (e.g., system boundaries, privacy impact assessments (PIAs), system security plans (SSP), risk assessments (RA), memoranda of understanding, interconnection security agreements, contingency plans (CP), etc.)
Maintain currency on latest security vulnerabilities and options for mitigation.
Develop risk mitigations and recommendations for identified security assessment findings.
Review system categorization and associated controls. Maintain currency in federal cybersecurity policy, e.g., Office of Management and Budget (OMB) Memorandum, NIST Special Publications, and FedRAMP.

Clearance:

Existing Public Trust, or the ability to obtain one.

Basic Qualifications - Required Experience, Skills:

Six to eight (6-8) years of relevant experience.
Bachelor's Degree.
Excellent communication skills in the English language both verbal and written.

Desired Experience, Skills, Knowledge:

Must possess one of the following certifications: CAP, GIAC, GSLC, CISM, CRISC, CISSP, or CASP.
Experience with IT tools, systems, and reporting mechanisms and requirements for A&A.
Experience in information assurance, e.g., accreditation, security testing and evaluation.
Experience working on high performing A&A teams, including adapting industry standards to create ISC "best practices".

Physical Demands:
Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

**_RCG, Inc. does not discriminate against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibits discrimination against all individuals based on their race, color, religion, sex, sexual orientation/gender identity, or national origin._