Certification Specialist

General Requirements:

 

Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.  Must be clearable to the Secret level.

 

Develop and execute a Certification & Accreditation program within a major Government Agency. Must possess experience with NIST standards.  Must possess experience performing security testing of systems using tools such as ISS, Retina and Nessus.  It is preferred that this person be a current Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar security professional certification.

 

Principal Duties and Responsibilities:

 

?  Develop unified guidelines and procedures for conducting certifications and/or system-level evaluations of federal information systems and networks including the critical infrastructure of the customer

?  Develop, update, and maintain appropriate Certification & Accreditation packages based on NIST standards for general support systems and major applications

?  Recommend appropriate FIPS 199 impact level designations and identify appropriate security controls based on characterization of the general support system or major application

?  Develop and evaluate SRTM for each system and insure test plans and test cases appropriately address all technological, managerial, and operational controls

?  Perform security testing of major applications and general support systems using ISS, Retina, nessus, etc. as part of C&A activities

?  Develop appropriate security test reports and provide final recommendations for systems Certification & Accreditation

?  Develop and maintain POA&M for all accepted risks upon completion of system C&A.

?  Assist the government with developing a network of public and private sector organizations capable of providing cost effective, quality, system and network security assessment and certification based on unified federal guidelines and procedures

?  Integrate with a team of skilled information technology security professionals demonstrating competence in the application of the system certification guidelines and procedures

?  Perform Security Testing & Evaluations (ST&E) of systems