DAO

Columbia, Maryland, United States | IAAI | Full-time

Apply

Assevero Security Consulting, LLC has several current openings for highly motivated and qualified security professionals. Successful candidates will support cybersecurity-related projects for a large government client near Hanover, MD

They will perform the duties of a Delegated Authorizing Official, including:

  • Establish system boundaries in coordination with the security categorization process
  • Categorize a system to the appropriate confidentiality, integrity, and availability impact levels, and register the impact levels in the database of record
  • Select the baseline security controls, based on the categorization of the information system
  • Tailor and supplement the baseline security controls to meet unique organizational needs
  • Document the final set of security controls in the database of record
  • Review compensating controls and mitigation strategies to satisfy information system protection needs during the implementation phase of the SDL
  • Develop, review, and provide recommendations to the Government for approving plans to assess security controls
  • Assess security controls in accordance with the assessment procedures defined in the Assessment Plan
  • Prepare security assessment report(s) documenting issues, findings, and recommendations from the security control assessment
  • Prepare POA&Ms based on the findings and recommendations for each Security Assessment Report generated
  • Assist with determining the risk to organizational operations, organizational assets, individuals, other organizations, or the nation
  • Assist with determining if the risk to organizational operations, organizational assets, individuals, other organizations, or the nation is acceptable
  • Assemble the security authorization package and submitting the package to a Government DAO or Authorizing Official for adjudication
  • Assist with determining the security impact of proposed or actual changes to an authorized information system and its environment of operation
  • Complete periodic information system re-authorization decisions
  • Accompany/represent the Government organization at risk management-related working group meetings, customer meetings, and project status review meeting

The successful candidate will also provide analysis of current business processes and help to formulate continuous improvement initiatives for the C&A and Continuous Monitoring processes; and devise metrics for collecting data to evaluate the performance of ISS processes.

Qualifications for this position include 5 to 10 years of directly related experience, excellent communications skills, a current TS/SCI Security Clearance with Full Scope Polygraph. Level I or II DOD Cybersecurity Workforce Improvement Program (CWIP) Certification.

Assevero Security Consulting, LLC offers a competitive compensation package, including a generous base salary, eight weeks of paid time off, up to 3 days of paid time off for volunteer work in your community, disability insurance, and medical, dental, and vision insurance. We also provide several quality-of-life enhancement benefits such as a 401(k)-retirement plan, life insurance, and military leave.