Cybersecurity Compliance Specialist

🕒 vor 1 Monat

🇺🇸 Vereinigte Staaten – Remote

⏰ Vollzeit

🟡 Mittelstufe

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 41%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Lucayan Technology Solutions LLC

WebsiteLinkedInAlle Stellen

51 - 200 Mitarbeiter

Gegründet 2015

💼 Beratung

📦 Logistik

🎖️ Verteidigung

Consulting • Logistics • Defense

Lucayan Technology Solutions LLC ist ein CVE-zertifiziertes, von Veteranen geführtes kleines Unternehmen, das integrierte Informationstechnologie- und Personaldienstleistungen für US-Regierungsbehörden (einschließlich des Verteidigungsministeriums) und gewerbliche Kunden anbietet. Das Unternehmen bietet Cloud-Migrationen (AWS IaaS/SaaS), Netzwerk- und konvergente Infrastrukturen (SDN, NFV, VMware), konsolidierten Helpdesk/Support und Cybersicherheitslösungen und verfügt über mehrere föderale Vertragsvehikel (GSA, STARS III, SeaPort-NxG, 8(a), HubZone, SDVOSB). Lucayan legt besonderen Wert auf missionsorientiertes, agiles Engineering mit Zertifizierungen von Cisco, VMware und Microsoft, um sowohl klassifizierte als auch nicht-klassifizierte, missionskritische Initiativen zu unterstützen.

Beschreibung

• Develop, update, and maintain WWBI Risk Management Framework authorization documentation, including the SSP, COOP, IRP, System Design Documents, and related authorization artifacts • Manage and document program-specific security controls and requirements associated with PII • Maintain documentation defining the WWBI authorization boundary, including hardware, software, ports, protocols, interfaces, and data flows • Coordinate cybersecurity documentation and compliance activities for WWBI's migration into the CWBI Cloud and eventual incorporation into the CWBI authorization boundary • Maintain WWBI compliance records in eMASS, including RMF documentation, security-control evidence, implementation statements, and supporting artifacts • Support the continuous-monitoring program, including coordinating or performing ACAS and SCAP security scans • Maintain a compliance score of at least 90% for applicable SCAP scans • Import and maintain security-scan results in DISA STIG Viewer and eMASS • Analyze vulnerabilities and coordinate remediation with software developers and Government technical personnel • Track Critical, High, Moderate, and Low findings according to required remediation timelines • Document exceptions and outstanding findings in the POA&M • Develop, maintain, and submit quarterly POA&M reports • Support quarterly updates to the RMF documentation package • Provide ACAS/SCAP scan results and STIG Viewer files following required scans • Maintain current system security, network topology, logical, and data-flow documentation with the development team • Complete and maintain security-control checklists required by the USACE CWBI Cloud environment • Monitor CWBI cybersecurity requirement changes and coordinate implementation of new or modified requirements • Support annual FISMA reporting requirements and associated documentation • Support compliance with DoD STIGs, Army cybersecurity requirements, and USACE policies during modernization and cloud-migration activities • Work closely with software developers, DevSecOps personnel, technical leadership, and Government stakeholders to maintain continuous compliance

🎯 Anforderungen

• U.S. Citizenship required • Demonstrated experience supporting the DoD Risk Management Framework (RMF), including developing and maintaining RMF authorization packages and cybersecurity documentation • Experience using Enterprise Mission Assurance Support Service (eMASS) • Knowledge of DoD, U.S. Army, and/or USACE cybersecurity requirements and processes • Experience with vulnerability management, security controls, POA&Ms, and continuous monitoring • Experience with ACAS, SCAP, DISA STIGs, and STIG Viewer • Ability to interpret technical vulnerability findings and coordinate remediation with software-development and infrastructure teams • Strong technical writing, documentation, and organizational skills • Ability to manage multiple recurring compliance requirements and deadlines • Ability to communicate effectively with technical personnel, program leadership, and Government stakeholders • Active federal background investigation at the Tier 1 level or higher prior to beginning contract performance • Ability to obtain and maintain CompTIA Security+ or a DoD-approved equivalent within six months of contract start, as applicable to the assigned DoD 8140 work role • Previous USACE systems or applications experience preferred • DoD ATO authorization and continuous-monitoring experience preferred • AWS GovCloud or other DoD-authorized cloud-environment experience preferred • Familiarity with DevSecOps, GitHub, secure software-development pipelines, and application modernization preferred • Cloud-migration experience for systems operating under an existing RMF authorization preferred • FISMA reporting experience preferred • CISSP or another advanced DoD-recognized cybersecurity certification desired

🏖️ Vorteile

• Remote work arrangement • Full-time employment • Opportunity to support national defense and intelligence missions • Career-building opportunities • Security+ or DoD 8140-approved equivalent certification support/eligibility within six months, as applicable • Opportunity to obtain a CAC if required by duties