Cybersecurity Specialist

for security and interoperability.

• Perform information security risk assessments as part of the project lifecycle to ensure that new medical device technology conforms to security standards against internal and external threats.
• Perform Independent verification and validation (IV&V) testing, to include documentation of Plan of Action and Milestones (POAM) data within the DoD system.
• Perform risk assessments of information and technology systems by conducting accurate and thorough assessments of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of information and technology systems.
• Work with security leadership and stakeholders to identify remediation strategies and plans to enforce security requirements and address risks identified in the risk assessment process.
• Along with the Security Architect, advise during application development or acquisition projects to ensure that security controls are implemented as planned.
• Work with other security department members and stakeholders in scoping, planning and conducting third-party penetration testing, code reviews, or security assessments during the information security process.
• Perform risk assessments of third-party technology systems by conducting accurate and thorough assessments of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of DoD information and technology systems.
• Produce information security risk assessment reports that identify gaps with DoD Security Policies & Standards and propose remediation plans.
• Assist in conducting information system activity reviews and participate in Risk Management Framework (RMF) testing exercises and activities: Monitor and test application and network activity for assurance that systems of controls are in place and effective, and for compliance to DoD policies and federal regulations.
• Bachelor's degree in a related discipline or a minimum of four (4) years of experience
• Ability to obtain a Public Trust Clearance (NACI). You must be a U.S. citizen; active Secret Clearance preferred
• CompTIA Security + Certifications
• Working knowledge internal controls & IT Risk Assessment and Mitigation procedures
• Technical experience in security-related technologies such as encryption, remote access, anti-virus systems, etc.
• A basic knowledge of the 8 domains of the Common Body of Knowledge for information security:

• Asset Security
• Security Engineering
• Communications and Network Security
• Identity and Access Management
• Security Assessment and Testing
• Security Operations

• Desired: Experience with medical devices or a working knowledge of security frameworks such as HIPAA, HITRUST, NIST, ISO or other industry standards that are relevant to the DoD medical enterprise

Target salary range: $86,126 - $125,000

The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation.

Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.

#LI-SH1