CYBERSECURITY CONSULTANT (Remote)

Responsibilities

• Support system security assessments within cloud-based environments in accordance with FedRAMP, FISMA, NIST SP 800-53, 800-37, OMB, and other authoritative IT security guidance
• Provide support and direction for scheduling, project sequencing, and resource management; assist with managing client expectations and performing project management
• Prepare, review, and/or update, and maintain IT Security supporting artifacts; provide IT security guidance to Information System Owners
• Identify information security problems and challenges, research and develop technical solutions to rectify them
• Execute, examine, interview, and test procedures in accordance with FedRAMP requirements and NIST SP 800-53
• Avoidance of cyber security policies and implementation of required controls
• Validate information system security documentation to ensure FedRAMP and NIST control requirements are met
• Author recommendations based on findings to improve security postures compliant with FedRAMP and NIST controls
• Affirmation of Security Authorization Packages for completeness and compliance with FedRAMP and NIST requirements
• Participation in client interviews to complete Security Assessments
• Ensuring existing systems' Security Authorization Packages remain up to date throughout the life cycle
• Building a customer-focused relationship with client(s)
• Collaboration across multiple internal teams to ensure the successful delivery of results based on the scope of work
• Establishing standards and procedures to minimize risks
• Supporting working sessions with clients to ensure expectations and direction are aligned and timelines are being met
• Demonstrating ability to complete projects through the project lifecycle from initiation to project closure

Requirements

• 2-5 years of experience in either auditing or consulting
• Strong FedRAMP and NIST experience (in order of preference): FedRAMP, NIST SP 800-53, FISMA, NIST SP 800-171/CMMC, DoD CC SRG, RMF
• Strong written and verbal communication skills including the ability to explain technical matters to non-technical audiences
• Broad based IT background with a technical understanding of networks, protocols, security configurations, cryptography, identity and access management, and systems development life cycles
• Must have at least one of the following: Cisco Certified Network Associate Security (CCNA Security), Cisco Certified Network Associate Cyber Security Operations (CCNA Cyber Ops), Cybersecurity Analyst (CySA+), GIAC Certified Incident Handler (GCIH), GIAC Systems and Network Auditor (GSNA), GIAC Certified Intrusion Analyst (GCIA), Certified Information Systems Auditor (CISA), Certified Information System Security Professional or Associate (CISSP or Associate), Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Security Officer (CISSO), CyberSec First Responder (CFR), CompTIA Advanced Security Practitioner Continuing Education (CASP+) Continuing Education (CE), CompTIA Cloud+ (Cloud+), Global Industrial Cyber Security Professional (GICSP), Securing Cisco Networks with Threat Detection Analysis (SCYBER)