• Experience should include security policy development, security education, network penetration testing, application vulnerability assessments, risk analysis and compliance testing.
• Knowledge of federal information security standards, rules and regulations related to information security and data confidentiality and desktop, server, application, database, network security principles for risk identification and analysis.
• Performs assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy.
• This is achieved through passive evaluations such as compliance audits and active evaluations such as vulnerability assessments.
• Establishes strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems.
• Includes support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
• Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Support the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results and preparation of required reports.
• Complete all associated Assessment and Authorization activities, which ncludes all Risk Management Framework (RMF) Body Of Evidence (BOE) documentation: System Security Plan (SSP), Security Controls Traceability Matrix (SCTM), Control Family Security Operating Plans (SOPs), Continuous Monitoring (ConMon) Plan, and Plan of Actions and Milestones (POA&M).
• Strong analytical and problem-solving skills. Excellent communication (oral, written, presentation), interpersonal and consultative skills.

• A minimum of (5) years of demonstrated experience in the Information Security (Cybersecurity or Information Assurance) field.
• Experience with Splunk and SIEM configuration and analytics
• Maintaining documentation and reporting related to incident response
• Experience identifying and analyzing network intrusions; supporting computer forensic analysis

• Security+ or similar security certification is required
• CISSP is highly preferred

Education:

• Bachelor's Degree Information Management, or related field

Clearance:

• The ability to obtain a government moderate background security clearance

• The pay for this position ranges from $87,075 to $161,250.
• The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, and location.
• Also, certain positions are eligible for additional forms of compensation, such as bonuses.
• TISTA associates are eligible to participate in our comprehensive benefits plan! More information can be found here: https://tistatech.com/working-at-tista/