Cybersecurity Compliance Specialist

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 41%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Lucayan Technology Solutions LLC

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2015

💼 Conseil

📦 Logistique

🎖️ Défense

Consulting • Logistics • Defense

Lucayan Technology Solutions LLC est une petite entreprise certifiée CVE, détenue par des vétérans, qui fournit des services intégrés en technologies de l'information et en dotation en personnel aux agences gouvernementales américaines (y compris le Département de la Défense) et aux clients commerciaux. L'entreprise propose des migrations vers le cloud (AWS IaaS/SaaS), des infrastructures réseau convergentes (SDN, NFV, VMware), une assistance centralisée/help desk, et des solutions de cybersécurité. Elle dispose de plusieurs véhicules contractuels fédéraux (GSA, STARS III, SeaPort-NxG, 8(a), HubZone, SDVOSB). Lucayan met l'accent sur l'ingénierie agile axée sur la mission avec un personnel certifié Cisco, VMware et Microsoft pour soutenir des initiatives cruciales classifiées et non classifiées.

Description

• Develop, update, and maintain WWBI Risk Management Framework authorization documentation, including the SSP, COOP, IRP, System Design Documents, and related authorization artifacts • Manage and document program-specific security controls and requirements associated with PII • Maintain documentation defining the WWBI authorization boundary, including hardware, software, ports, protocols, interfaces, and data flows • Coordinate cybersecurity documentation and compliance activities for WWBI's migration into the CWBI Cloud and eventual incorporation into the CWBI authorization boundary • Maintain WWBI compliance records in eMASS, including RMF documentation, security-control evidence, implementation statements, and supporting artifacts • Support the continuous-monitoring program, including coordinating or performing ACAS and SCAP security scans • Maintain a compliance score of at least 90% for applicable SCAP scans • Import and maintain security-scan results in DISA STIG Viewer and eMASS • Analyze vulnerabilities and coordinate remediation with software developers and Government technical personnel • Track Critical, High, Moderate, and Low findings according to required remediation timelines • Document exceptions and outstanding findings in the POA&M • Develop, maintain, and submit quarterly POA&M reports • Support quarterly updates to the RMF documentation package • Provide ACAS/SCAP scan results and STIG Viewer files following required scans • Maintain current system security, network topology, logical, and data-flow documentation with the development team • Complete and maintain security-control checklists required by the USACE CWBI Cloud environment • Monitor CWBI cybersecurity requirement changes and coordinate implementation of new or modified requirements • Support annual FISMA reporting requirements and associated documentation • Support compliance with DoD STIGs, Army cybersecurity requirements, and USACE policies during modernization and cloud-migration activities • Work closely with software developers, DevSecOps personnel, technical leadership, and Government stakeholders to maintain continuous compliance

🎯 Exigences

• U.S. Citizenship required • Demonstrated experience supporting the DoD Risk Management Framework (RMF), including developing and maintaining RMF authorization packages and cybersecurity documentation • Experience using Enterprise Mission Assurance Support Service (eMASS) • Knowledge of DoD, U.S. Army, and/or USACE cybersecurity requirements and processes • Experience with vulnerability management, security controls, POA&Ms, and continuous monitoring • Experience with ACAS, SCAP, DISA STIGs, and STIG Viewer • Ability to interpret technical vulnerability findings and coordinate remediation with software-development and infrastructure teams • Strong technical writing, documentation, and organizational skills • Ability to manage multiple recurring compliance requirements and deadlines • Ability to communicate effectively with technical personnel, program leadership, and Government stakeholders • Active federal background investigation at the Tier 1 level or higher prior to beginning contract performance • Ability to obtain and maintain CompTIA Security+ or a DoD-approved equivalent within six months of contract start, as applicable to the assigned DoD 8140 work role • Previous USACE systems or applications experience preferred • DoD ATO authorization and continuous-monitoring experience preferred • AWS GovCloud or other DoD-authorized cloud-environment experience preferred • Familiarity with DevSecOps, GitHub, secure software-development pipelines, and application modernization preferred • Cloud-migration experience for systems operating under an existing RMF authorization preferred • FISMA reporting experience preferred • CISSP or another advanced DoD-recognized cybersecurity certification desired

🏖️ Avantages

• Remote work arrangement • Full-time employment • Opportunity to support national defense and intelligence missions • Career-building opportunities • Security+ or DoD 8140-approved equivalent certification support/eligibility within six months, as applicable • Opportunity to obtain a CAC if required by duties