Security Assessor

Req ID: 43244

Summary

Security Assessor

Remote

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employers core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!

The Security Assessor will play a critical role in ensuring the security and compliance of the HHS ACL EITS program's information systems. The individual will be responsible for assessing security controls, conducting security audits, and developing secure architectures that align with federal regulations and guidelines, such as FISMA, NIST 800-53, and FedRAMP. The Security Assessor /Security Architect will collaborate with key stakeholders, including the Information System Security Officer (ISSO), Cloud Infrastructure Architect, and other program teams, to ensure a secure and resilient environment.

Responsibilities

• Conduct comprehensive security control assessments of the HHS ACL EITS systems to ensure compliance with FISMA, NIST 800-53, FedRAMP, and other federal regulations.

• Prepare and present security assessment reports to senior management and government stakeholders.

• Develop and maintain secure architecture designs that comply with federal security standards, ensuring the system's confidentiality, integrity, and availability.

• Collaborate with the Cloud Infrastructure Architect and Application Developers to integrate security controls into system design and implementation.

• Implement security by design principles and ensure all software, systems, and infrastructure meet stringent security requirements.

• Conduct risk assessments to identify and prioritize risks associated with information systems.

• Develop and implement risk mitigation strategies, ensuring that all identified risks are managed appropriately and in alignment with government standards.

• Ensure that security documentation, such as System Security Plans (SSPs) and Risk Management Framework (RMF) artifacts, is up-to-date and accurately reflects the system's security posture.

• Perform regular vulnerability assessments and penetration testing to identify and remediate security weaknesses in the system.

• Assist in the preparation and execution of Authorization and Accreditation (A&A) packages, ensuring compliance with NIST RMF and supporting the program's ongoing operations.

• Work closely with the Authorizing Official (AO) to ensure timely authorization of systems and assist in maintaining accurate and updated authorization status.

• Assist in the incident response process, investigating and reporting security breaches, unauthorized access, and other security incidents.

• Lead forensic investigations to determine root causes of incidents and provide recommendations for remediation.

• Prepare post-incident reports detailing the findings and actions taken to prevent future occurrences.

• Develop and deliver security awareness training for staff and stakeholders, ensuring everyone understands their role in maintaining the program's security.

• Foster a security-first mindset across the program to ensure all team members contribute to the protection of information assets.

• Other duties as assigned.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or additional experience in Lieu of a degree.

• 5+ years of experience in security architecture, security assessment, or a related cybersecurity role within a federal or government environment.

• Certification in the following is preferred:

• Certified Information Systems Auditor (CISA), or Certified Ethical Hacker (CEH).

• Certified Information Security Manager (CISM) or Certified Cloud Security Professional (CCSP) is a plus.

• Certified Information Systems Security Professional (CISSP), or equivalent experience and knowledge commensurate with certification requirements

• Ability to Pass Public Trust Background Investigation

Knowledge, Skills and Abilities:

• Extensive experience with NIST RMF, FISMA, FedRAMP, and other federal security frameworks.

• Familiarity with cloud security architectures, particularly in Microsoft Azure and/or AWS environments.

• Strong understanding of vulnerability management, penetration testing, and forensic investigation tools.

• Experience with SIEM tools, security monitoring, and incident response frameworks.

How youll grow

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe theres always room to learn.

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.

Benefits

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits.

Learn more about what working at Chenega MIOS can mean for you.

Chenega MIOSs culture

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives.

Corporate citizenship

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.

Learn more about Chenegas impact on the world.

Chenega MIOS News- https://chenegamios.com/news/

Tips from your Talent Acquisition Team

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links:

Chenega MIOS web site - www.chenegamios.com

Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI\_IE369514.11,23.htm

LinkedIn - https://www.linkedin.com/company/1472684/

Facebook - https://www.facebook.com/chenegamios/

Teleworking Permitted?

Yes

Teleworking Details

Remote

Estimated Salary/Wage

USD $103,400.00/Yr. Up to USD $115,000.00/Yr.

Chenega Corporation and family of companies is an EOE.

Equal Opportunity Employer/Veterans/Disabled

Native preference under PL 93-638.

We participate in the E-Verify Employment Verification Program