Information Assurance Expert
Washington, DC

Job Description

Overview:

NuCrest is seeking an Information Assurance Expert to join our team in Washington, DC. Must havae a minimum of ten (10) years of experience as an Information System Security Officer (ISSO), IT security and IT governance and possess the following: an Active Secret Clearance or higher, have a Bachelor's degree in Information Technology or cyber-related field, one or more of the following certifications: SC Certified Information System Security Professional (CISSP), GIAC Security Essentials (GSEC), CompTIA Cybersecurity Analyst (CySA+), CompTIA Security+ CE, Systems Security Certified Practitioner (SSCP), Certified Information Security Manager (CISM), ISC Certified Authorization Professional (CAP), CompTIA Advanced Security Practitioner (CASP+), GIAC Cyber Security Leadership (GSLC) .

Description:

This position is to provide professional support services for cybersecurity and information assurance. This consists of information system security officer services and application support system management. The client for this position is the United States Coast Guard (USCG) and the candidate will be expected to perform the following tasks listed below.

Responsibilities:

* Monitor, respond to, investigate, and report on potential and actual security and privacy violations in accordance with USCG Cyber Command and US Computer Emergency Readiness Team (US-CERT).
* Provide input and assist in reviewing and updating CG-6813s Information Assurance Security Plan
* Work alongside Government investigators to investigate incidents of cyber security violations and shall be a crucial component of the Government official report on each investigation.
* Perform IT security services functions to include, but not limited to, IT information assurance governance, Certification and Accreditation (C&A), security infrastructure protection, incident reporting, and security awareness training.
* Provide risk assessments, proper planning and communication strategies prior to implementing any security activities.
* Manage risks by utilizing standard security services, including system account management, risk assessment, penetration testing, investigations, and contingency trials
* Make technical recommendations and expert technical mediation advice on how to fix IT security issues, flaws, and any concerns identified by the Contractor or Government.
* Provide Cyber Security support in complying with Defense Information Security Administration (DISA) issued Task Orders (TASKORD)
* Develop, review revise, and provide for programs acceptance Contingency and Disaster Recovery Planning and annual contingency plan testing
* Provide cyber security engineering and security control development and documentation to include integration support
* Assist the Coast Guard with providing Sensitive Personally Identifiable Information (PII) and Protected Health Information Privacy Support including creation, updates, and review of Privacy Threshold Assessment (PTA), Privacy Impact Assessments, and System of Records Notice (SORNs) for Direct Access

Minimum Experience and Skills:

* Minimum ten (10) years of experience as an Information System Security Officer (ISSO) with supporting assessment and authorization activities protecting government systems and applications
* Experience with writing to security and privacy controls
* Experience with conducting risk assessments and analyses
* Experience with developing security documentation and applying IT security trends and IT security techniques.
* Experience with NIST, DISA, and DoD security compliance guidance.
* Proficiency in interpersonal skills.
* Proficiency in handling multiple tasks concurrently.
* Proficiency in project and time management.
* Ability to adjust to changing priorities.
* Ability to work in a cohesive team-oriented environment. Proficiency in proofreading deliverables for clear, concise language, completeness, correctness, and consistency.

Minimum Education:

* Bachelors degree in Information Technology or cyber-related field.

Certifications:

* Must posses one of the following certifications or something similar: ISC Certified Information System Security Professional (CISSP), GIAC Security Essentials (GSEC), CompTIA Cybersecurity Analyst (CySA+), CompTIA Security+ CE, Systems Security Certified Practitioner (SSCP), Certified Information Security Manager (CISM), ISC Certified Authorization Professional (CAP), CompTIA Advanced Security Practitioner (CASP+), GIAC Cyber Security Leadership (GSLC)
* All professional certifications and CPE credits must be up to date each year for validation by the customer

Clearance:

* Secret Clearance or higher

Work Core Hours:

* 8-hour workday, during a 5-day/40-hour workweek: During normal work hours of 8:00 AM to 5:00 PM.

Overtime Work:

* N/A

NuCrest, LLC is a minority-owned Service-Disabled Veteran-Owned Small Business (SDVOSB)/Small-Disadvantaged Business (SDB) based in Anne Arundel County, Maryland focuses on delivering a diverse portfolio of security-focus IT Enterprise Services and Solutions to support the critical missions of Federal and Civic clients. We deliver our services across multiple enterprise platforms, data networks, and cloud environments.

At NuCrest we support our Veterans and encourage all to apply!

NuCrest provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.