Authorization & Accreditation Specialist

Vtgdefense; Herndon (VA); On-site; USD 130,000 - 195,000; Full time

Job summary

VTG seeks an Authorization and Accreditation Analyst to perform assessments of systems and networks in a 100% onsite role in Herndon, VA. The position emphasizes compliance, vulnerability assessment, and support for certification and accreditation processes under INFOSEC/IA policies.

Must hold a Top Secret/SCI with Polygraph and have 3+ years of A&A experience, ICD 503 familiarity, and Nexpose scanning expertise.

Qualifications

• Top Secret/SCI with Polygraph required.
• 3+ years of experience with the Authorization and Accreditation process.
• Familiarity with ICD 503.
• Experience with Rapid7 Nexpose scanning and results.
• Ability to administer the Information Systems Security program and contribute to system security.
• Experience in systems analysis, integrations, and project management.
• Strong interpersonal, written, and briefing skills.

Responsibilities

• Perform assessments of systems and networks and identify deviations from configurations and policies.
• Conduct compliance audits and vulnerability assessments.
• Establish program controls to mitigate risks and support certification and accreditation.
• Support security test, documentation, and audits.
• Prepare Security Plans and update POAMs.
• Review audits and monitor corrective actions until closure.
• Perform ISSE across system architectures and verification tests.

Skills

Top Secret/SCI with Polygraph

A&A process

ICD 503 familiarity

Nexpose scanning

Security program administration

Systems analysis

Project management

Communication skills

Tools

Rapid7 Nexpose

Job description

Overview

We are seeking an Authorization and Accreditation Analyst. This role is 100% onsite in Herndon, VA.

What will you do?

• Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy.
• Passive evaluations such as compliance audits and active evaluations such as vulnerability assessments.
• Establishing strict program control processes to ensure mitigation of risks and support obtaining certification and accreditation of systems.
• Support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
• Providing direct support to establishing and maintaining enclave and network accreditation and special approval authorizations, as required, for all networked and stand‑alone information systems (IS), using Information Security (INFOSEC) and Information Assurance (IA) policies, such as the use of NIST or CNSS standards for security certification assessment and testing related to ICD-503 controls using CNSS 1253 controls, and other USG guidance
• Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Support the formal Security Test and Evaluation required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results and preparation of required reports.
• Document the results of assessment and authorization activities and technical or coordination activity and prepare the system Security Plans and update the Plan of Actions and Milestones.
• Periodically conduct a complete review of each system's audits and monitor corrective actions until all actions are closed.
• Perform Information Systems Security Engineering of system architectures, requirements analysis and decomposition, including system performance test and verification.

Do you have what it takes?

• Must have a Top Secret/SCI with Polygraph.
• 3+ years experience with the Authorization and Accreditation Process
• Familiarity with ICD 503
• Experience with and Rapid7 Nexpose scanning and results.
• Demonstrated ability to perform day-to-day administration of the Information Systems Security program and understanding the security design, consultation, and technology implementation for various customer projects and initiatives.
• Demonstrated ability to perform systems analysis & integrations, requirements analysis, process definition and implementation, and project management.
• Demonstrated knowledge in assisting system users relative to information systems security matters and undertakes moderately complex projects requiring additional specialized technical knowledge.
• Ability to demonstrate interpersonal, organizational, writing, communications, and briefing skills

PayRange: VTG’s estimated starting pay range is $130,000-$195,000 annually, which is a general guideline for the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range.