Senior Systems Information Assurance SME - ValidaTek, Inc.

Company Overview:At ValidaTek, we modernize and optimize IT services to solve some of the most critical challenges facing federal civilian and defense agencies. From customers to partners to top-talent employees, ValidaTek puts people first, empowering them to exceed expectations and transform government organizations. Our success starts and ends with our people, so we built a company where great people can do great things, with the resources and autonomy to make decisions that transform organizations. We operate as one team of diverse people, united by a passion for continuous growth and optimization. Our commitment to quality and performance optimization is the reason why our IT Service Projects and New Development Projects have been appraised at CMMI Maturity Level 5, positioning us as one of a handful of elite companies to receive the highest form of third-party validation. www.validatek.comSummary:

We are seeking a Senior Systems Information Assurance SME to join our Team. The successful candidate will be responsible for ensuring the security and integrity of our organization's information systems and data. The Senior Information Assurance SME will play a critical role in developing and implementing security policies, procedures, and standards to protect our organization's sensitive data from cyber threats. The ideal candidate will have a strong background in information security, risk management, and compliance.

This role will be the Program Manager/Lead for the remaining FSD positions. The Senior System Security IA SME shall serve as the knowledge expert of all security related aspects of the FSD ICS computing environment. Should have proven experience implementing and maintaining security postures within complex network architectures. This SME must have knowledge of Defense in Depth concepts supporting DoD infrastructures, C&A, physical and personnel security concepts.

Responsibilities:

• Develop and implement information security policies, procedures, and standards in compliance with industry standards, laws, and regulations. 
• Assess and manage risks to the organization's information systems and data. 
• Monitor, evaluate and report on the effectiveness of information security controls and procedures. 
• Collaborate with cross-functional teams to identify and mitigate information security risks. 
• Conduct security assessments, including vulnerability and penetration testing, and recommend appropriate remediation measures. 
• Develop and deliver information security training and awareness programs for all staff. 
• Maintain up-to-date knowledge of emerging security threats, trends, and technologies. 
• Provide guidance and direction to other members of the information security team.

Qualifications:

• Active DoD Top Secret Clearance.
• Bachelor's degree in computer science, information technology, or a related field. 
• At least 10 years of experience in information security or a related field. 
• Industry certifications such as CISSP, CISM, or CISA preferred.
• Experience/knowledge of the DoD IAVM
• Experience with ACAS and HBSS architectures
• Experience/knowledge of the DoD IAVM
• Experience with ACAS and HBSS architectures
• Develop appropriate security policies, and perform periodic upgrades and updates to servers and network devices on Building Maintenance network to ensure appropriate secured access to
• Respond to Network Operations notifications, shall utilize the Assured Compliance Assessment Solution (ACAS) to acknowledge, monitor and create appropriated security reports, and apply recommended IAVA to the Building Maintenance network in specified
• Update and track system vulnerabilities, and provide information system security recommendations and assistance. The contractor shall comply with all appropriate DoD and applicable agency security standards.
• Vulnerability scanning using ACAS and other security measures to mitigate risks to the network
• Maintain and Monitor the Host Based Security System(HBSS)
• Maintenance of the System Security Authorization Agreement (SSAA) for the network
• Provide information system security advice and assistance
• Design/Maintain/Create system configuration and architecture documentation
• Design /Maintain/Create system process and procedure documentation
• Maintain and support DoD Information Assurance Risk Management Framework (DIARMF) accreditation and documentation for the network
• Perform configuration management, vulnerability assessments, and vulnerability management assistance for systems and network
• Experience in FISMA, DoD IG Inspection, ACA, and other accreditation and certification
• Knowledge of Incident Response, Auditing, and CNDSP
• Knowledge of and comprehension on how to implement 8570.01-M./DoD8140.

Posted Min Pay Rate:USD $114,693.12/Yr.Posted Max Pay Rate:USD $191,155.20/Yr.Salary Disclosure:Actual salary will be based on a variety of factors including but not limited to experience, geographic location, contract affordability, internal equity, education, and certifications. The upper end of the salary range may be reserved for individuals who have demonstrated tenure with the company, seniority, and proven excellent performance. This includes factors such as education, certifications, and extensive/unique experience beyond what is required. EEO Statement:ValidaTek is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, or disability status.Applicants who are selected for employment will be required to verify authorization to work in the United States.Offers of employment will be contingent upon passing a post-offer background check.