Cyber Security Assessor

at Oasis Systems, LLC
Published July 26, 2019
Location Rockville, MD
Category Default  
Job Type Full-time  

Description

Oasis Systems has an exciting opportunity for a Cyber Security Analyst in Rockville, MD. The Cyber Security Analyst acts as a lead consultant, interfacing between the customer and IT security consulting team throughout the federal information system Security Assessment & Authorization (SA&A) lifecycle process.

  • EDUCATION: BA/BS degree in information systems, computer science, or related fields
  • CERTIFICATIONS AND TOOLS: The Ideal candidate will also have one or more of the following certifications: CISSP, CISM, CEH, CISA, Security+ and/or CAP
  • SECURITY CLEARANCE: The ability to obtain an NRC Security Clearance
  • LOCATION: Rockville, MD
  • JOB STATUS: Full time

  • TRAVEL: Occasional Domestic Travel

  • EXPERIENCE LEVEL:  4 years working in the SA&A field and at least 2 years information systems, computer science, or related fields (may be concurrent)
  • Working face-to-face with multiple stakeholders interviewing, planning, or participating in a team effort to bring multiple complex projects to fruition in a highly motivated, fast paced environment.
  • Development of SA&A process documents.
  • Understanding of Cloud platforms (PaaS, SaaS, IaaS) and protections as described in FedRAMP.
  • Assess/audit systems to analyze risk and report on identified weaknesses.
  • Conducting in-depth technical reviews of new and existing IT systems in order to identify the appropriate mitigation strategies required to bring these systems into compliance with established policy and industry guidelines.
  • Providing ongoing gap analysis of current policies, practices, and procedures as they relate to established guidelines outlined by NIST, OMB, FISMA, etc.
  • Knowledge of IT security architecture and design (firewalls, Intrusion Detection Systems, Virtual Private Networking, and virus/malware protection technologies -- behavioral based a plus).
  • Knowledge of LAN/WAN design and general internetworking technologies. Hands-on experience a plus.
  • Knowledge of Windows and Unix operating systems. Hands-on experience a plus.