Strategic Resources, Inc. Looking for Information System Security Specialist III at Philadelphia, PA  Full Time

Specialist, Information System Security III (SISS3)

(Location: Philadelphia, PA)

Strategic Resources, Inc. (SRI) is a leader in providing Information Technology support to the Department of Defense. We are an international, ISO 9001:2015 Certified, CMMI Level 3 Rated full-service provider with more than 34 years of experience in the Federal, Military, and Commercial Marketplaces. SRI is seeking a committed and knowledgeable Information System Security Specialist to provide Cybersecurity Support Services to the Naval Surface Warfare Center, Philadelphia Division (NSWCPD) located in Philadelphia, PA. Telework may be authorized based schedule and assigned task. Some travel is required (15%).

*This job posting is in response to a request for proposals from the DoD. By applying in advance of the award of the contract, SRI will be able to consider and pre-qualify applicants, should SRI be awarded the contract. This potential work is scheduled to begin in August 2023.

Overview: The NSWCPD Propulsion, Power & Auxiliary Machinery Systems Department 40 of the Naval Surface Warfare Center, Philadelphia Division performs life cycle management services on Hull and Deck Machinery systems. This includes all aspects of cybersecurity on those systems, including development and validation of Cybersecurity, Engineering, T&E, A&A, Risk Management Framework (RMF) packages and artifacts.

Tasks & Responsibilities:

• Performs risk management and security engineering for Research, Development, Testing, and Evaluation; perform risk management and security engineering for Research, Development, Testing, and Evaluation (RDT&E) RMF Afloat systems including Information Assurance Vulnerability Management (IAVM) support, remediation, patching, scanning and associated boundary maintenance.
• Develops all required eMASS documents, to include Plan of Actions and Milestones (POA&Ms)/ Risk Assessment Reports (RARs) and Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs); products shall be created in the appropriate software (i.e. Microsoft Visio, scanning software, eMASS DISA STIG Viewer, etc.)
• Determines a system’s compliance with all applicable Controls and Assessment Procedures (CAPs) for an assigned Department of Navy (DoN) system, including developing the appropriate test procedures, if necessary; executing the test procedures; and accurately documenting the results of security
• Documents residual risks in a Plan of Actions and Milestones formatted in compliance with the current package system, currently eMASS.
• Maintains current vulnerability scan data and residual risk Plan of Actions and Milestones in Vulnerability Remediation Asset Manager (VRAM).
• Tracks deliverables and action items in accordance with A&A guidance.
• Manages, attends, and supports configuration control board practices.
• Ensures RMF artifacts are in compliance with published Navy, NAVSEA Business Rules (OPNAV N2N6 and/or NAVSEA), NIST SP-800-37 and SP-800-53 Rev 4. In addition, local NSWCPD policies and procedures may apply. Command Information System Security Manager (ISSM) will resolve any conflicting interpretations.
• Creates and verifies the accuracy of POA&Ms/RARs as identified by vulnerability actual test
• Ensures information systems are operated, used, maintained, and disposed of in accordance with security policies and practices as required by the authorization package and NSWCPD.
• Test system to verify adequate functionality for mission or project requirements.
• Applies system configuration changes and software application updates (patches) as required by automated security assessment tools.
• Considers operational mission requirements when applying system configuration changes and work with system owner(s) to develop and execute plans and procedures to secure the system against cybersecurity threats to the greatest extent possible while providing continuous capability to conduct mission requirements.
• Develops and enhances Operating Procedures, Process Guides, User Agreements, and system-level RMF Control Family Plans and Procedures specific to operating system configuration settings and capabilities.
• Identifies, presents and implements improvements to operating system configuration settings to maintain a secure operating system.
• Provides expert subject matter knowledge of the following operating systems: Windows 10, Windows 7, Windows XP.

Required Skills, Education, Experience & Abilities:

• College degree in technical or managerial related discipline (Note: a high school diploma or HS equivalency certificate is acceptable with greater than seven (7) years of experience).
• Possess at least one of the following certificates: CCNA Security; CySA+; GICSP; GSEC; Security+ CE; SSCP
• More than five (5) years of practical experience in a Cybersecurity, Engineering, T&E or A&A (formerly C&A) related field.
• More than five (5) years of practical experience in Microsoft Windows Operation System Administration, including Windows 10, Windows 7, and Windows XP (at a minimum).
• More than five (5) years of practical experience in using command line interface, PowerShell, and performing automated tasking through the use of code.
• Experience with Information Assurance tools such DISA Enterprise Mission Assurance Support Services (eMASS), Assured Compliance Assessment Solution (ACAS), and may be required to hold a Full Security Control Assessor qualification.
• Ability to travel in CONUS and OCONUS (15%).

Security Requirements:

• Active Secret Clearance Preferred; able to obtain a Secret Clearance.