Security Documentation Analyst

At Development InfoStructure Inc. (Devis) we are dedicated to providing exceptional IT consulting services and solutions to Federal, State and Local Governments as well as the international development community.

Our primary mission is to satisfy the goals and objectives of our customers, and we approach problems as opportunities to invest our time in developing long-term solutions and assets.  We are passionate about our work and about creating an environment where everyone is supported to perform while maintaining a healthy work-life balance.  We know that the best investment we can make is in our people!

Overview

Devis is currently seeking an experienced Security Documentation Analyst to provide documentation and ISSO support for four information systems for a US international development program in Rosslyn, VA!

Specific responsibilities include but not limited to:

• Creating and maintaining the full scope of documentation required for Risk Management Framework (RMF) assessment & authorization and continuous monitoring.
• Documents for each system include: System Security Plans, Continuous Monitoring Plans, Contingency Plans, Contingency Plan Tests & After Action Reports, POAM Management Plans
• Review, edited documents such as Contingency Plan (CP), Contingency Plan Test (CPT), System Security Plan (SSP) for the Joint Polar Satellite Support System (JPSS) Ground System.
• Creating, maintaining and reviewing information security policies in accordance with NIST SP800-53 rev. 4
• Creating, maintaining and review Standard of Procedure (SOP) to support dash one (-1) control policies in accordance with NIST SP800-53 rev. 4
• Track POA&Ms and review artifacts for closure in Xacta
• Create monthly POA&M reports to be presented to the System Owner and stakeholders
• Participate in an annual Security Control Assessment (SCA), gathering artifacts for an assessment to ensure the system meets the Authority to Operate (ATO)
• Maintaining the information systems’ hardware (physical & virtual) and software inventory
• Support the security team with preparing written presentations for mangers or targeted groups to explain highly technical or complex programs, projects or situations and to request their buy in
• Prepare Memorandums for the client for various issues dealing with security risks and security posture
• Participate in the annual COOP & Disaster Recovery exercises
• Create, maintain and update Interconnection Service Agreements (ISA) to ensure they are updated before the expiration date
• Meets with the Information System Security Manager (ISSM) on a weekly basis to ensure tasks/action items are being completed and taking notes on any new tasks that are distributed

Required Skills and Qualifications

• Experience in the full scope implementation of the Risk Management Framework
• General knowledge of information system architecture
• General knowledge of vulnerability management
• Solid writing skills to support technical user guide documentation, standard operating procedures, and response playbooks
• Experience with FISMA, OMB Cybersecurity Directives, and NIST 800-53, etc.
• General knowledge of network security monitoring and computer incident handling and response capability and tools

Education / Certifications

• Bachelor’s Degree or higher in Computer Science, Electrical Engineering or other engineering or technical discipline

Clearance Requirements

• Must be a U.S. Citizen with an active Secret Clearance

Additional Perks/Benefits

• Competitive salary compensation
• Commuter benefits that include free on-site parking or SmartTrip reimbursement
• SEP Retirement Savings Plan
• Flexible, results oriented work environment
• Performance bonuses 

Devis is an AA/EOE/M/F/Disabled/VET Employer committed to providing equal employment opportunity without regard to an individual’s race, color, religion, age, gender, sexual orientation, veteran status, national origin or disability.