Security Specialist

Job Description:

 

We are seeking a security engineer with a seasoned technical background to support IT Security Certification and Accreditation activities within the Department of Commerce (DOC), National Oceanic and Atmospheric Administration (NOAA), National Environmental Satellite Data Information System (NESDIS) Office of Systems Development (OSD). US Citizenship required.  EEO/AA.

Roles and responsibilities will include:
• Develops and maintains all required Certification and Accreditation (C&A) documentation.
• Ensures systems are developed, operated, maintained, and disposed of in accordance with security policies and practices defined in the approved C&A documentation.
• Coordinates all security products and actions through the NOAA NESDIS OSD Security Officer (ISSO), and will serve as an alternate ISSO.
• Ensures the reporting of all security-related incidents to the NOAA NESDIS OSD ISSO
• Participates in system remediation and recovery processes and ensures proper restoration of required security hardening features.
• Initiates, by approval of the NOAA NESDIS OSD ISSO, protective and corrective measures when a security incident or vulnerability is discovered.
• Conducts periodic reviews (self-assessments) of NOAA OSD systems security controls as required to maintain compliance with C&A and Federal Information Security Management Act (FISMA) auditing.
• Participates in all technical and change control meetings to determine security-related impacts and ensure the NOAA NESDIS OSD security posture is maintained.
• Advise customer regarding sound security policy and viable technology solutions; assist customer to define security requirements and to assess design options; and facilitate the effective and secure achievement of NOAA NESDIS mission and goals.

Job Qualifications:

• Must be able to obtain a DoD Secret Security Clearance.  A current DoD Secret Security Clearance, a plus.

• CISSP, SANS, or CISA/CISM certifications are highly desired.
• Individual must have substantial experience implementing NIST SP 800 series guidelines.  Familiarity with the DITSCAP or NIACAP certification and accreditation processes is a plus.
• Awareness and understanding of both federal and national standards bodies relating to information assurance.
• Must possess a strong technical background of IP networks, firewalls, IDS, and other security-related applications.
• Candidate must possess excellent problem solving skills; analytical ability; interpersonal, organization and team building skills; and demonstrate strong communication and oral presentation abilities.

 Required Experience:
Security Specialist: (BS) Degree, or equivalent work experience,  in Information Systems, Computer Science, Mathematics, or Engineering with 5 plus years of experience in information systems security engineering including security policy development, security requirements analysis and definition, security risk assessment, security test and evaluation, security certification and accreditation of automated information systems, system/network security design, evaluation of security products or technologies and/or the integration of security products and solutions.