Job Description

• Assist the IPF Information System Owner (ISO) and Information System Security Officers (ISSOs) in completing and maintaining the information assurance a baseline for IPF programs.
• Provide information security-related subject matter expertise and system engineering analysis to the IPF ISO and ISSO.
• Assist the IPF ISO and ISSO, and IPF programs, for completing program review and assessment milestone events for IPF programs.
• Assist the IPF ISO and ISSO, and the IPF programs, in developing and implementing corrective and remediation actions for information assurance / cybersecurity-related deficiencies.
• Produce, maintain or update, as appropriate, information assurance-related artifacts as required by national, community and NGA law, policy and guidelines.
• Assist IPF program developers on information assurance / cybersecurity-related matters, in particular for compliance with national, community and NGA law, policy and guidelines.
• Maintain and update the IPF program entries in the required artifact repositories, and ensure artifact completeness, accuracy, and currency.
• Maintaining and updating program entries and artifacts in the Xacta, XACTA 360, and any other A&A artifact repository systems
• Creating and staffing C&A packages on behalf of the program ISO and ISSO.
• Coordinating and consulting with the IPF contractor program development teams to implement information assurance measures in support of C&A, Authorization to Operate (ATO), Continuous Monitoring (CONMON), and other major program security review milestones and events.
• Provide information assurance-related subject matter expertise to the IPF programs on best practices, compliance requirements, and cybersecurity capabilities.
• Assist the ISO and ISSO in conducting security assessments, security audits, vulnerability analyses and scans, accreditation evaluations, and other formal information security-related evaluations.
• Assist the IPF programs incorrectly installing and implementing NGA information security-related tools, such as HBSS, Carbon Black, and ArcSight, and integrating them to the NGA enterprise security monitoring endpoints as appropriate.
• Create, update and manage any Plan of Action and Milestones (PO&M) POA&Ms necessary for A&A certification.

Qualifications

• TS/SCI Clearance
• Strong technical base in the following:
  • Technologies and capabilities, with particular focus on Xacta, Xacta 360, HBSS, Carbon Black, and ArcSight
  • Cloud environment security, with particular focus on configuring and managing Amazon AWS-provisioned Virtual Private Clouds (VPCs)
  • NGA data center and workstation environment security
  • Laws, directives, policies, procedures, and regulations, with particular focus on NGA-relevant compliance references, with particular focus on ICD 503 compliance requirements

Additional Information

Highlight is an Equal Opportunity Employer/Affirmative Action employer.