IT Security Analyst/Assessor

Responsibilities

• Perform Certification & Accreditation (C&A) and System Assessment & Authorization (SA&A) using NIST SP 800-37 RMF
• Prepare vulnerability scanning test plans and conduct scans using Nessus, Foundstone, WebInspect, and Hailstorm
• Analyze vulnerability scan results for validation and root cause analysis
• Design and implement security solutions to protect data confidentiality, integrity, and availability
• Provide technical evaluations of customer CM and CMI solutions
• Participate in the design of business impact analysis, system categorization, and contingency plans
• Conduct testing and audit log reviews to evaluate security effectiveness

Requirements

• US Citizenship required
• Active Public Trust Clearance (adjudicated within past 5 years)
• BS degree in computer or system science
• Experience in Federal Government Contracts
• Certification in information technology (e.g., Security+)
• 5+ years of experience conducting security control assessment of NIST 800-53 controls
• Knowledge of NIST 800-53 security controls and documentation
• Experience with Risk Management Framework (RMF) approach

Preferred Qualifications

• Familiarity with Cyber Security Assessment Methodology (CSAM) tool

About the Company

NXTKey Corporation has been delivering Information Technology, Information management, Information Assurance (IA) and cybersecurity solutions to US Federal Government since 2005.