Cybersecurity Compliance Specialist

🕒 Agosto 20

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 48%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Lucayan Technology Solutions LLC

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2015

💼 Consultoria

📦 Logística

🎖️ Defesa

Consulting • Logistics • Defense

Lucayan Technology Solutions LLC é uma empresa de pequeno porte, certificada pelo CVE, de propriedade de veteranos, que oferece serviços integrados de tecnologia da informação e de recrutamento para agências governamentais dos EUA (incluindo o Departamento de Defesa) e clientes comerciais. A empresa proporciona migrações para a nuvem (AWS IaaS/SaaS), infraestrutura de rede e convergente (SDN, NFV, VMware), central de ajuda/suporte consolidada e soluções de cibersegurança, possuindo múltiplos contratos federais (GSA, STARS III, SeaPort-NxG, 8(a), HubZone, SDVOSB). Lucayan enfatiza engenharia ágil e orientada por missão, com pessoal certificado pela Cisco, VMware e Microsoft, para apoiar iniciativas críticas classificadas e não classificadas.

Descrição

• Develop, update, and maintain WWBI Risk Management Framework authorization documentation, including the SSP, COOP, IRP, System Design Documents, and related authorization artifacts • Manage and document program-specific security controls and requirements associated with PII • Maintain documentation defining the WWBI authorization boundary, including hardware, software, ports, protocols, interfaces, and data flows • Coordinate cybersecurity documentation and compliance activities for WWBI's migration into the CWBI Cloud and eventual incorporation into the CWBI authorization boundary • Maintain WWBI compliance records in eMASS, including RMF documentation, security-control evidence, implementation statements, and supporting artifacts • Support the continuous-monitoring program, including coordinating or performing ACAS and SCAP security scans • Maintain a compliance score of at least 90% for applicable SCAP scans • Import and maintain security-scan results in DISA STIG Viewer and eMASS • Analyze vulnerabilities and coordinate remediation with software developers and Government technical personnel • Track Critical, High, Moderate, and Low findings according to required remediation timelines • Document exceptions and outstanding findings in the POA&M • Develop, maintain, and submit quarterly POA&M reports • Support quarterly updates to the RMF documentation package • Provide ACAS/SCAP scan results and STIG Viewer files following required scans • Maintain current system security, network topology, logical, and data-flow documentation with the development team • Complete and maintain security-control checklists required by the USACE CWBI Cloud environment • Monitor CWBI cybersecurity requirement changes and coordinate implementation of new or modified requirements • Support annual FISMA reporting requirements and associated documentation • Support compliance with DoD STIGs, Army cybersecurity requirements, and USACE policies during modernization and cloud-migration activities • Work closely with software developers, DevSecOps personnel, technical leadership, and Government stakeholders to maintain continuous compliance

🎯 Requisitos

• U.S. Citizenship required • Demonstrated experience supporting the DoD Risk Management Framework (RMF), including developing and maintaining RMF authorization packages and cybersecurity documentation • Experience using Enterprise Mission Assurance Support Service (eMASS) • Knowledge of DoD, U.S. Army, and/or USACE cybersecurity requirements and processes • Experience with vulnerability management, security controls, POA&Ms, and continuous monitoring • Experience with ACAS, SCAP, DISA STIGs, and STIG Viewer • Ability to interpret technical vulnerability findings and coordinate remediation with software-development and infrastructure teams • Strong technical writing, documentation, and organizational skills • Ability to manage multiple recurring compliance requirements and deadlines • Ability to communicate effectively with technical personnel, program leadership, and Government stakeholders • Active federal background investigation at the Tier 1 level or higher prior to beginning contract performance • Ability to obtain and maintain CompTIA Security+ or a DoD-approved equivalent within six months of contract start, as applicable to the assigned DoD 8140 work role • Previous USACE systems or applications experience preferred • DoD ATO authorization and continuous-monitoring experience preferred • AWS GovCloud or other DoD-authorized cloud-environment experience preferred • Familiarity with DevSecOps, GitHub, secure software-development pipelines, and application modernization preferred • Cloud-migration experience for systems operating under an existing RMF authorization preferred • FISMA reporting experience preferred • CISSP or another advanced DoD-recognized cybersecurity certification desired

🏖️ Benefícios

• Remote work arrangement • Full-time employment • Opportunity to support national defense and intelligence missions • Career-building opportunities • Security+ or DoD 8140-approved equivalent certification support/eligibility within six months, as applicable • Opportunity to obtain a CAC if required by duties

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo