Authorization & Accreditation Specialist

VTG Defense; Herndon (VA); On-site; USD 130,000 - 195,000; Full time

Job summary

VTG Defense in Herndon, VA seeks an Authorization and Accreditation Analyst to lead assessments of systems and networks, build security documentation, and support certification activities. The role is onsite and requires TS/SCI with Polygraph and hands-on experience with ICD-503 and NIST guidance.

You will perform vulnerability assessments, audits, and action tracking, coordinating with government accreditation authorities, and preparing Security Plans and POA&Ms.

Qualifications

• Must have a Top Secret/SCI with Polygraph.
• 3+ years experience with the Authorization and Accreditation process.
• Familiarity with ICD 503.
• Experience with and Rapid7 Nexpose scanning and results.
• Demonstrated ability to perform day-to-day administration of the Information Systems Security program and understanding the security design, consultation, and technology implementation for various customer projects and initiatives.
• Demonstrated ability to perform systems analysis & integrations, requirements analysis, process definition and implementation, and project management.
• Demonstrated knowledge in assisting system users relative to information systems security matters and undertakes moderately complex projects requiring additional specialized technical knowledge.
• Ability to demonstrate interpersonal, organizational, writing, communications, and briefing skills.

Responsibilities

• Perform assessments of systems and networks within the networking environment or enclave and identify deviations from configurations, enclave policy, or local policy.
• Conduct passive evaluations such as compliance audits and active evaluations such as vulnerability assessments.
• Establish program control processes to mitigate risks and support certification and accreditation of systems.
• Support process, analysis, coordination, security test, and security documentation activities.
• Provide direct support to establishing and maintaining enclave and network accreditation and special approvals using INFOSEC/IA policies.
• Perform analyses to validate security requirements and recommend safeguards.
• Support formal Security Test and Evaluation required by accrediting authorities through pre-test preparations and reporting.
• Document assessment results and prepare Security Plans and POAMs.
• Periodically review system audits and monitor corrective actions until closed.
• Perform Information Systems Security Engineering of system architectures and performance testing.

Skills

Top Secret clearance

A&A process

Security policy

Interpersonal communication

Tools

Rapid7 Nexpose

Job description

Overview

We are seeking an Authorization and Accreditation Analyst. This role is 100% onsite in Herndon, VA.

What will you do?

• Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy.
• Passive evaluations such as compliance audits and active evaluations such as vulnerability assessments.
• Establishing strict program control processes to ensure mitigation of risks and support obtaining certification and accreditation of systems.
• Support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
• Providing direct support to establishing and maintaining enclave and network accreditation and special approval authorizations, as required, for all networked and stand-alone information systems (IS), using Information Security (INFOSEC) and Information Assurance (IA) policies, such as the use of NIST or CNSS standards for security certification assessment and testing related to ICD-503 controls using CNSS 1253 controls, and other USG guidance
• Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Support the formal Security Test and Evaluation required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results and preparation of required reports.
• Document the results of assessment and authorization activities and technical or coordination activity and prepare the system Security Plans and update the Plan of Actions and Milestones.
• Periodically conduct a complete review of each system's audits and monitor corrective actions until all actions are closed.
• Perform Information Systems Security Engineering of system architectures, requirements analysis and decomposition, including system performance test and verification.

Do you have what it takes?

• Must have a Top Secret/SCI with Polygraph.
• 3+ years experience with the Authorization and Accreditation Process
• Familiarity with ICD 503
• Experience with and Rapid7 Nexpose scanning and results.
• Demonstrated ability to perform day-to-day administration of the Information Systems Security program and understanding the security design, consultation, and technology implementation for various customer projects and initiatives.
• Demonstrated ability to perform systems analysis & integrations, requirements analysis, process definition and implementation, and project management.
• Demonstrated knowledge in assisting system users relative to information systems security matters and undertakes moderately complex projects requiring additional specialized technical knowledge.
• Ability to demonstrate interpersonal, organizational, writing, communications, and briefing skills

PayRange: VTG's estimated starting pay range is $130,000-$195,000 annually, which is a general guideline for the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range.