cFocus Software seeks a Jr. Principal Security Consultant to join our program supporting USITC. This position is fully remote. This position requires active TS/SCI clearance.
Qualifications:
- A degree in Computer Science, Information Systems, Engineering, Business Administration, or other related discipline is preferred.
- 10+ years of Cybersecurity engineering experience
- 10+ years of experience with NIST 800 Series, FIPS 199 & 200, FISMA, FedRAMP
- At least one of the following certifications: CASP+, CySA+, or CISSP
Duties:
- Conduct and Assessment and Authorization (A&A) review for each of the systems, funded on a rotational basis, ensure compliance with all federal and agency requirements
- Review all A&A supporting documentation to ensure correctness and consistency
- Provide security and privacy expertise and guidance to ensure the consistent application of A&A processes
- Maintain and provide reports on the status of all A&A materials and supporting documentation
- Verify implementation of controls is consistent with the system security plan (SSP) and system privacy plan and corresponding NIST control requirements
- Conduct scanning of websites, network devices, workstations, and servers
- Provide A&A expertise in the application of best practices to standardize and enhance A&A processes ensuring compliance with NIST 800-37, Revision 2
