Information Assurance

Bespoke Technologies, Inc.; Bethesda (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

Bespoke Technologies, Inc. seeks an Information Assurance SME to support a large national security program in Bethesda, MD. This on-site role requires active poly clearance and deep expertise in ATO processes, cybersecurity risk management, and ICAM architectures.

You will respond to security policy needs, develop baseline security requirements, analyze risks, and collaborate with IC partners to ensure compliant cyber solutions and secure operations across enterprise IT services.

Qualifications

• Active Poly clearance is required to be considered.
• Typically 12–15 years of relevant experience or equivalent with a BS degree.
• Expert knowledge in ATO process and cybersecurity requirements.
• Experience partnering across the IC and with Service Providers.

Responsibilities

• Respond to congressional inquiries on Cybersecurity; translate needs into requirements and solutions.
• Develop and publish baseline security requirements for common enterprise services; ensure compliance with directives.
• Assist with Authority to Operate (ATO) process and assess program ability to attain an ATO.
• Provide guidance and recommendations for security-related issues.
• Diagram interim and future ICAM architecture and define ATO integration expectations for IT services.

Skills

ATO process

Cybersecurity

Risk management

Network security

ICAM

Education

Bachelor's degree

Job description

BT-517 – Information Assurance SME

Skill Level: Subject Matter Expert

Location: Bethesda, MD (fully on-site, no remote option available)

• Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.**

Job Summary

Exciting opening for an Information Assurance SME to support a large customer organization in the fast-growing National Security Group.

Primary Responsibilities

• Respond to congressional inquiries on Cybersecurity issues; turning cybersecurity needs and capabilities into requirements and detailed technical solutions; developing and maintaining a list of Cybersecurity Architecture needs, dependencies, risks, and mitigation plans; analyzing cybersecurity best practices to identify gaps and improvement opportunities.


• Be able to contribute meaningful input to Cybersecurity policies. You will also be developing and publishing baseline security requirements for common enterprise services to ensure capabilities are in compliance with cybersecurity directives and policies; conducting critical path analysis, risk analysis, and task dependency analysis; developing security requirements and constraints to provide input to foundational technical documents, including program architectural artifacts, business cases, and concept of operations.


• Assisting with Authority to Operate (ATO) process


• Assessing program ability to attain an ATO


• Providing guidance and recommendations for Security related issues


• Diagram an interim and future architecture for ICAM implementation


• Define/communicate ATO integration expectations for all IT services


• Working with Service Providers to ensure systems are integrate-able


• Act as the SME for all Cybersecurity questions and concerns for the customer


• Willingness to assist in areas outside of Cybersecurity as necessary


• Familiarity with Microelectronics


• Firm understanding of the Cybersecurity requirements across the IC

Basic Qualifications

• Typically require BS degree and 12 – 15 years of prior relevant experience in order to operate within the scope contemplated by the level. Experience may be exchanged for degree requirements.


• Experience in cybersecurity responsibility areas listed above.


• Detail-oriented, ability to consistently provide high-quality products that are concise, thorough, and accurate.


• Ability to adapt in response to shifts in customer priorities.


• Expert knowledge in ATO process


• Experience partnering across the IC


• Experience in Risk Management


• Must have a solid background in Network security and experience deploying tools to various networks.