CyberSecurity Risk Management Specialist (Top Secret Clearance Required)

Intevity; New York (NY); Remote; USD 115,000 - 135,000; Full time

Job summary

Join a forward-thinking consultancy as a CyberSecurity Risk Management Specialist, where your expertise in securing cloud environments will be pivotal. This role involves collaborating with cross-functional teams to develop robust security plans and assessments, ensuring compliance with industry standards like NIST and DISA. With the flexibility of a mostly remote position, you will engage in meaningful work that impacts both commercial and public sector clients. An established industry player offers a competitive salary, comprehensive benefits, and a culture of innovation and trust. If you're passionate about cybersecurity and ready to make a difference, this opportunity is for you.

Benefits

Medical Insurance

Dental Insurance

Vision Insurance

401k with Company Match

Open PTO Plan

Short-term Disability Insurance

Long-term Disability Insurance

Life Insurance

Qualifications

• Must hold TS clearance and Security + Certification.
• Experience with AWS, Azure, or GCP for securing cloud offerings.

Responsibilities

• Architect secure IaaS and PaaS solutions within multiple CSPs.
• Conduct cyber security assessments and manage security controls.

Skills

TS Clearance

Security + Certification

CISM

CRISC

CISSP

AWS

Azure

GCP

NIST

ISO

COBIT

OWASP

ITIL

Vulnerability Scanning Tools

Cloud Security Monitoring Tools

MS Office

Tools

Prisma Cloud

ACAS

Tenable.IO

Harbor

Windows Defender

Azure Monitor

AWS CloudWatch

AWS CloudTrail

AWS Guard Duty

New Relic

Prometheus

Job description

CyberSecurity Risk Management Specialist (Top Secret Clearance Required)

• Full-time

As a digitally-focused management consultancy, we do more than strategy. From strategy and design to architecture and development, we deploy senior, cross-functional teams to work hip-to-hip in the trenches with client teams.

Founded in 2003, Intevity (previously Twin Technologies) is a full service, digitally-focused management consultancy based in Boston, MA with remote offices and employees throughout the eastern and central US (Baltimore, Chicago, D.C., New York). Intevity focuses on both Commercial and Public Sector clients, with deep expertise in retail, software, and government. Intevity has key vendor partnerships with Adobe, AWS, and Salesforce.

We work on all phases of projects, from early discovery and design to strategy to execution. We are known for our vulnerability-based culture, high levels of craftsmanship, innovation, and trust; being able to truly connect with the needs and spot the real reasons why an organization is being held back from achieving their goals.

As our CyberSecurity Risk Management Specialist, you will consistently challenge team members to proactively and collectively architect secure IaaS and PaaS solutions within multiple Cloud Service Provider's (CSP). Candidates should have effective task management skills and the ability to communicate effectively. They will be required to prepare, categorize, implement, assess, and monitor systems within accordance with NIST SP 800-53 and DISA CC SRG standards.

Major Duties & Responsibilities:

• Subject Matter Expert (SME) in data entry and processes for eMASS, SNAP, PPSM, STIG viewer, etc.
• Develop System Security Plan (SSP), Security Assessment Report (SAR) and POA&Ms to guide Product Owners through key processes for submitting IATT, ATO, and ATO-C packages.
• Support the evaluation of security controls against the IaaS and PaaS offerings provided.
• Support the creation and management of a new security risk management process in order to approve and authorize new capabilities and monitor the output of the process.
• Conduct cyber security assessments using security controls per NAP 14.1C and 14.2-C relating to cyber security and training (NIST 800 series, DISA CC SRG, FISMA, and FIPS 199 and 200).

Qualifications:

• Currently holds TS clearance.
• 90% Remote (with a home office in DC, MD, VA area).
• Candidate must have an active Security + Certification and at least one security certification such as Certified Information Security Management (CISM), Certified Risk Information Security Control (CRISC), or Certified Information Systems Security Professional (CISSP).
• Experience working in AWS, Azure, or GCP to secure IaaS, PaaS, and SaaS offerings.
• Subject matter expertise in conducting security risk assessments for on-prem, hybrid cloud, and cloud systems.
• Highly proficient in knowledge of respective industry best practices (e.g., NIST, ISO, COBIT, OWASP, ITIL).
• Knowledge of risk management policies, methods, standards, processes, governance models, and industry-standard risk analysis approaches.
• Experienced with vulnerability scanning tools and technologies such as Prisma Cloud, ACAS, Tenable.IO, Harbor, Windows Defender, etc.
• Familiar with Cloud based security monitoring tools such as Azure Monitor, Windows Defender, AWS CloudWatch, AWS CloudTrail, AWS Guard Duty, New Relic, Prisma Cloud, Prometheus, etc.
• Profound ability to collaborate well with internal and external stakeholders.
• Strong MS Office skills along with strong verbal and written communication skills.
• Prior experience in the management of technology infrastructure is preferred.
• Knowledge of the DoD is strongly preferred.

Intevity offers a competitive and comprehensive employee compensation and benefits package that includes base salary ($115,000 - $135,000), medical, dental, and vision insurance, long and short-term disability insurance, life insurance, 401k program with company match, and an open PTO plan.

Intevity is an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and expression, national origin, disability, or protected veteran status.