Cybersecurity Architect

We need to output HTML fragment with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections with real content. We need to parse the posting. First, there is "About Peraton" which is company description; we should not include as heading? The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should not include "About Peraton" as a heading; we can maybe include it as a

under something? But they said do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

or drop it. They didn't forbid company description; but they only gave examples of headings. Likely we should include "About the role" heading and then content from "About The Role". Then responsibilities maybe from that same paragraph? Actually responsibilities are described in that paragraph: ensuring implementation and maintenance of security controls, managing ATO packages, drafting security documentation, etc. So we can put responsibilities under a

Responsibilities

with

• . Requirements: maybe the "Qualifications" section includes required qualifications. They have "Qualifications Required Qualifications:" then a long list. Also "Desired Qualifications". We could combine required and desired under Requirements? Or separate Qualifications and Skills? The instruction: Use headings for About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to decide what goes where. We have content: "About The Role" paragraph. Then "Qualifications Required Qualifications:" then list of required qualifications. Then "Desired Qualifications:" list. Then "Details Target Salary Range:" then benefits statement. Also "This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area." That's schedule. Thus we can map: - About the role: the paragraph after "About The Role". Could also include the initial "About Peraton"? Probably not needed. We'll put the paragraph about the role. - Responsibilities: extract duties from that paragraph: ensuring implementation and maintenance of security controls in accordance with RMF v5, managing ATO packages, drafting security documentation including Operating Procedures, Cybersecurity Strategy (CSS), System Security Plans (SSP) ATO packages as well as System Security and Privacy Plan (SSPP) in accordance with DoD policies, Department of Airforce (DAF) regulations and our Federal Government customer's guidance. Also must have expert knowledge and demonstrated experience with cybersecurity technologies, risk management, and incident response procedures as well as have a solid working understanding of computer functions, including hardware, software, and operating systems. This includes knowledge of Windows, Unix, and Linux operating systems, along with other applications such as databases, web servers, networking technologies, including routing, switching, and VPNs. It's a bonus if the candidate has experience with cloud computing platforms such as AWS and Azure. The candidate must be able to work autonomously, manage their workload effectively, shift priorities with little to no loss of productivity and communicate effectively with technical and non-technical personnel. We could separate responsibilities vs requirements. But responsibilities likely the duties; qualifications are the required qualifications. Thus responsibilities list: bullet points of duties. Requirements: maybe the "Required Qualifications" list (the long bullet-like sentences). Could be considered requirements. Qualifications: maybe the "Desired Qualifications"? Or we could treat "Qualifications" as the required qualifications and "Skills" as desired? But they have both headings. Let's assign: - Requirements: the mandatory requirements (Active CompTIA Security+ and/or CASP+, Active TS clearance with SCI eligibility, Education/Experience, etc.) - Qualifications: maybe the "Desired Qualifications" (Active CASP+ certification, experience transitioning from RMF v4 to v5, etc.) - Skills: maybe the technical skills list (knowledge of NIST SP 800-53, etc.) but that overlaps. Better to follow typical job posting: Responsibilities (duties), Requirements (mandatory qualifications), Qualifications (preferred qualifications), Skills (maybe technical skills). But we have a lot of overlapping content. We need to preserve all substantive information; not invent or summarize away detail. So we need to include all content from the posting, just organized. Thus we can create sections:

  About the role

  [the paragraph about the role]

  Responsibilities

  • Ensure implementation and maintenance of security controls in accordance with RMF v5
  • Manage ATO packages
  • Draft security documentation including Operating Procedures, Cybersecurity Strategy (CSS), System Security Plans (SSP) ATO packages as well as System Security and Privacy Plan (SSPP) in accordance with DoD policies, Department of Airforce (DAF) regulations and Federal Government customer guidance
  • Apply expert knowledge and demonstrated experience with cybersecurity technologies, risk management, and incident response procedures
  • Maintain solid working understanding of computer functions, including hardware, software, and operating systems (Windows, Unix, Linux), databases, web servers, networking technologies (routing, switching, VPNs)
  • Possibly work with cloud computing platforms such as AWS and Azure (bonus)
  • Work autonomously, manage workload effectively, shift priorities with little to no loss of productivity
  • Communicate effectively with technical and non-technical personnel
  But note some of these are actually qualifications. However we can keep them as responsibilities if they appear in the role paragraph. The role paragraph includes: "The successful candidate will be responsible for ensuring the implementation and maintenance of security controls in accordance with RMF v5, managing ATO packages, drafting security documentation including Operating Procedures, Cybersecurity Strategy (CSS), System Security Plans (SSP) ATO packages as well as System Security and Privacy Plan (SSPP) in accordance with DoD policies, Department of Airforce (DAF) regulations and our Federal Government customer's guidance. The candidate must have expert knowledge and demonstrated experience with cybersecurity technologies, risk management, and incident response procedures as well as have a solid working understanding of computer functions, including hardware, software, and operating systems. This includes knowledge of Windows, Unix, and Linux operating systems, along with other applications such as databases, web servers, networking technologies, including routing, switching, and VPNs. It's a bonus if the candidate has experience with cloud computing platforms such as AWS and Azure. The candidate must be able to work autonomously, manage their workload effectively, shift priorities with little to no loss of productivity and communicate effectively with technical and non-technical personnel." Thus we can split: responsibilities: the first sentence (ensuring implementation... managing ATO packages, drafting security documentation...). Then the rest could be qualifications/skills. But to avoid duplication, we could keep responsibilities limited to the duties, and put the rest under Requirements/Skills. Let's extract duties: "ensuring the implementation and maintenance of security controls in accordance with RMF v5, managing ATO packages, drafting security documentation including Operating Procedures, Cybersecurity Strategy (CSS), System Security Plans (SSP) ATO packages as well as System Security and Privacy Plan (SSPP) in accordance with DoD policies, Department of Airforce (DAF) regulations and our Federal Government customer's guidance." That's the duty list. Now the rest: "The candidate must have expert knowledge and demonstrated experience with cybersecurity technologies, risk management, and incident response procedures as well as have a solid working understanding of computer functions, including hardware, software, and operating systems. This includes knowledge of Windows, Unix, and Linux operating systems, along with other applications such as databases, web servers, networking technologies, including routing, switching, and VPNs. It's a bonus if the candidate has experience with cloud computing platforms such as AWS and Azure. The candidate must be able to work autonomously, manage their workload effectively, shift priorities with little to no loss of productivity and communicate effectively with technical and non-technical personnel." These are more like qualifications/skills. Thus we can put those under Requirements or Skills. Now the "Qualifications Required Qualifications:" section includes a long list of required qualifications: "Well-versed in best practices for cyber security program standards, processes, and procedures compliance, industry-standard security frameworks and demonstrated expert working knowledge of NIST Special Publication (SP) 800-53: Recommended Security Controls for Federal Information Systems, NIST SP 800-53A: Guide for Assessing the Security Controls in Federal Information Systems, AFPD 17-1 and AFI 17-130, Cybersecurity Program Management.Ability writing security policies and procedures, CSS, SSP, SSPP, and assess all ATO package artifacts.Expert knowledge of Risk Management Framework (RMF) v5 (Processes, workflow, etc.).Ability to use eMASS to execute, RMF v5 to include document / update system status, identify, document, and manage implementation of operational and technical security controls, implementation and risk assessment tabs, non-compliant and non-validated controls, POAM management (entry, evidence, close-out), produce report and track Plan of Action and Milestone (POA&M) due dates, etc.The ability to complete a checklist to ensure Security Authorization Process documents are complete and comply with all guidance.Ability to work collaboratively with IT counterparts, communicate effectively (skilled in communicating complex technical information to non-technical audience) and coordinate STIG remediation with system administrators and developers.Ability to conduct risk assessments, monitor security Incidents and respond appropriately to Security Threats.Working understanding of network technology (includes knowledge of network protocols, TCP/IP), operating systems as well as the necessary security protocols, system details (Architecture, data flow, security cat, requirements, configuration management process/procedures, and user profile) firewalls, rules and configurations, intrusion detection tools and prevention systems, encryption techniques, Windows, Unix, and Linux) operating systems, along with other applications such as databases and web servers.Ability to execute tasks with little to no oversight or support as well as manage multiple, and at times, competing priorities without loss of productivity.Certifications: Active CompTIA Security+ and/or CASP+.Security Clearance: Active TS clearance with SCI eligibility.Education/Experience: Bachelor's degree and 8+ years of experience or Master's degree and 6+ years of experience or PhD and 3+ years of experience. A degree in one of the following fields is highly desired: Information Technology, Computer Science, Cybersecurity, Information Systems, Data Science, or Software Engineering. In lieu of a degree, an additional 4 years of relevant experience or specialized training is required." Then "Desired Qualifications: Active CASP+ certification.Experience transitioning from RMF v4 to v5.Basic understanding of identity and access management system capabilities and configuration.Experience with cloud computing platforms such as AWS and Azure.Experience with TASKORDS, OPORDS, etc.Experience leading Cybersecurity (ISSO & ISSE) teams." Then "Details Target Salary Range: $135,000 - $216,000." Then benefits statement. Then schedule: "This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area." Thus we can map: - About the role: the paragraph after "About The Role" (the first paragraph). We'll include that as

  . - Responsibilities: the duty list (ensuring implementation... managing ATO packages... drafting security documentation...). We'll put as

  . - Requirements: the "Required Qualifications" list (the long block). We'll break into bullet points. - Qualifications: the "Desired Qualifications" list. - Skills: maybe we could put the technical skills from the earlier candidate must have expert knowledge etc. But we already have many overlapping. To avoid duplication, we could put those under Skills. However the instruction says prefer a few substantive sections over many thin ones. We could combine Requirements and Qualifications into one? But they ask to use headings for those sections