Information Assurance Specialist

Overview

Edgewater is currently looking for an Information Assurance Specialist to support a federal customer in the Washington DC area.

The Information Assurance Specialist utilizesknowledge of Federal sector security processes, hardening of systems, and is essential to the team in managing projects in Azure Dev Ops, applying Scrum principles and practices to remove impediments and deliver value and foster a collaborative environment.

Responsibilities include, but are not limited to the following:

• Researches, organizes, writes, edits, trains,and produces technical data, guidelines, templates, and policy to support Security Engineering.

• Perform information security risk assessments across a variety of platforms and applicationssubmittedthrough the Change Management process.

• Guide users indeterminingand integrating baseline security requirements, advise on viability of alternative approaches and conduct and evaluate feasibility studies.

• Propose remediation/mitigating controls and recommendations to stakeholders and management to minimize risk.

• Address security concerns or issues with proposed software and hardware projects to ensure “baked-in” security considerations in project proposals.

• Lead security team engagements to build and mature processes to produce written Standard Operating Procedures with a focus on improvement to FERC’s Information Assurance processes, methodologies, and communication methods.

• Support iterative review of security assessment results and work with stakeholders across organizations to provide structure around risk management and internal controls.

• Experience with CIS Benchmarks and DISA STIGs toprovidesystem hardening guidance.

• Maintain a Master Library of Security Benchmarks for relevant systems as a reference for essential baseline security requirements,compliance and continuous monitoring capabilities.

• Provide status updates and follow-up on active open Security Engineering tickets.

• Align with and support the execution of the Cybersecurity Information Assuranceorganizationvision and strategy.

• Development of security guidance, policies, and procedures.

• Ability to obtaina Public Trust clearance.

• Other duties as assigned.

• Bachelor’s degree or equivalent work experience in related field.

• Experience with leading daily scrums, sprintplanningandfacilitatingthe scrum process.

• Sound cyber security knowledge foundation, to include understanding of Computer andnetworktechnology fundamentals.

• Strong familiarity with NIST Security Controls (NIST 800-53).

• Experience with security tools in an enterprise environmentto includeinstallation, configuration, usage, and troubleshooting.

• Demonstrate securityexpertisewith multiple
  
  Windows,and Unix-based operating systems.

• Excellent verbal and written communication skills and ability to build strong relationships with stakeholders at all levels.

• Strong problem-solving capabilities and the ability to effectively communicate solutions.

• Strong analytical capabilities.

• Strong understanding of how computer systems and networks are secured and in compliance with government and industry regulations.

• Ability to independently collect, review, and evaluate IT product data toidentifyand characterize security threat sources of concern and provide recommendations to Government leadership.

Preferred Qualifications:

• Experience with government contracting firms supporting the Federal government.

• Experience with Cloudproviderspreferably Azure.

• Scrum Master certification.

• Familiar with using agile tools for day-to-daytaskingpreferably Azure Dev Ops.

• 3-5 years of relevant work experience with network engineering and/or system administration background (Unix/Linux/Windows).

• Experience with Service Now.

• Some experience with Change Management and/or ITIL certified.

• Respond to service requests and support change management security review process.

• Subject matterexpertisein information security best practices.

• Ability to articulate ideas to both technical and non-technical audiences through excellent written and oral communication skills.

• The ability toestablisheffective relationships with internal partners and teams.

Physical Demands:The physical demands described here…