Project Lead​/Senior Information System Security Specialist

The Project Lead/Senior Information System Security Specialist

The Project Lead/Senior Information System Security Specialist provides program management and technical cybersecurity support for the Department of Transportation (Use the "Apply for this Job" box below). Federal Highway Administration (FHWA) Cyber Security Management Support program. Under the oversight of the FHWA Information System Security Manager (ISSM), this position plans, implements, operates, monitors, and reports on cybersecurity activities that strengthen the security posture of FHWA information systems.

The position manages work identified in the Statement of Work and provides ongoing recommendations to mitigate cybersecurity threats and risks. Program management activities align with applicable Project Management Body of Knowledge (PMBOK) principles and practices. This position requires an individual to perform as both a Project Manager and an ISSO. A strong cybersecurity background is required.

Estimated Starting Salary Range for Project Lead/Senior Information System Security Specialist: TBD

Pay commensurate with experience.

Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

• Develop, maintain, and manage annual and overall project plans, schedules, risk registers, issue logs, communications plans, quality plans, and related program documentation.
• Plan, coordinate, execute, track, and oversee program activities, individual work tasks, milestones, staffing, finances, deliverables, and performance from initiation through completion.
• Ensure all work remains aligned with task-order requirements, established schedules, delivery dates, and Government-approved milestones.
• Track planned, actual, accepted, and rejected deliverables; document rejection reasons; and manage corrective actions through resolution.
• Prepare Monthly Quality and Performance Reports, project status reports, and monthly status briefings addressing program health, accomplishments, ongoing and completed activities, staffing, risks, issues, milestones, and proposed resolutions.
• Schedule, coordinate, and host the Project Kick-Off Meeting and Monthly Status Review meetings; develop agendas, coordinate Government review, prepare meeting minutes, and track action items.
• Coordinate transition-in activities with Government personnel, the incumbent contractor, and other stakeholders.
• Manage staffing activities to maintain the required mix of skills, experience, certifications, licenses, and subject-matter expertise.
• Support the acquisition, retention, management, and training of assigned personnel.
• Ensure contractor personnel meet applicable labor-category requirements and complete required Government background checks and security requirements before receiving access to FHWA resources, data, and networks.
• Maintain quality-control processes and conduct peer reviews to ensure documents submitted to FHWA are technically accurate, professionally prepared, and free of grammatical and typographical errors.
• Identify and recommend opportunities to improve operational efficiency, cost effectiveness, cybersecurity effectiveness, and overall program value.
• Provide cybersecurity subject-matter expertise in incident handling, vulnerability detection, remediation planning, secure application development, cloud environments, and cloud services.
• Support the Information System Security Manager (ISSM) in maintaining the appropriate operational Information Assurance (IA) posture for systems, programs, and enclaves.
• Review logs using Elasticsearch suspicious log-activity queries to identify, investigate, and support response to cybersecurity incidents.
• Support FHWA Dev Sec Ops  implementation, including architecture diagrams, process documentation, standard operating procedures, and the integration and management of static code vulnerability scanners.
• Maintain an accurate inventory of FHWA network ranges, assets, groups, and custom groups in the DOT Continuous Diagnostics and Mitigation Big Fix tool.
• Conduct and analyze vulnerability and compliance scans for Linux, Windows, and virtual environments using tools such as Tenable Nessus, Splunk, Netsparker, Big Fix, SYNACK, and other approved technologies.
• Identify, assess, track, and support remediation of web application, database, network, and infrastructure vulnerabilities.
• Perform dynamic web application security testing through manual testing and application-security tools to identify exploitable vulnerabilities.
• Maintain FHWA core system documentation using standardized templates, technical guides, baseline-management artifacts, and supporting checklists.
• Support development and maintenance of Authorization to Operate and privacy documentation.
• Provide program support for FISMA, CFO, Office of Inspector General, and Government Accountability Office audits, evaluations, data calls, and other…