Principal Security Specialist

Infojini Inc; Arlington (VA); On-site; USD 100,000 - 120,000; Full time

Job summary

Infojini Inc is seeking a Principal Security Specialist for a 3+ year contract position based in Arlington, VA. The role involves performing security assessments, reviewing security controls, and developing security assessment reports.

Qualified candidates should possess a B.S. in a relevant field and have over five years of experience in IT security. Clearance eligibility is required, along with strong communication skills. Apply to join a dedicated team committed to security excellence.

Qualifications

• Eligible for Secret, Top Secret or DHS/OBIM/NPPD Clearance.
• B.S. from an accredited institution in a relevant discipline.
• Five plus years of experience in IT Security with automated assessment tools.

Responsibilities

• Perform Security Assessments and Technical Security Reviews (TSR).
• Review security controls using manual processes and automated tools.
• Develop Security Assessment Reports (SAR).

Skills

Eligible for Secret, Top Secret or DHS/OBIM/NPPD Clearance

Five plus years of experience in IT Security

Excellent written and verbal communication skills

In-depth knowledge of OMB, DHS 4300A/B, FIPS, NIST SP-800

Experience using automated assessment tools (Nessus, AppDetective)

Education

B.S. in a Technical or Engineering related discipline

Tools

Nessus

AppDetective

WebInspect

Core Impact

Job description

Infojini Consulting is an equal opportunity employer and considers all qualified individuals for employment irrespective of their race, gender, age, color, sexual orientation.

Job Description

We are looking for a Principal Security Specialist in Arlington, VA for a 3+ year contract position.

Job Title: Principal Security Specialist

Location: Arlington, VA

Duration: 3+ years

• Perform Security Assessments and Technical Security Reviews (TSR) for classified and unclassified systems;
• Ensure adherence to the DHS Systems Engineering Lifecycle (SELC) and Change Management (CM) principles;
• Develop and update testing procedures, Rules of Engagement (RoE) and security assessment scripts;
• Review output from existing vulnerability assessment tools (Nessus, AppDetective, etc.) to validate findings and identify false positives;
• Identify security risks, threats and vulnerabilities;
• Use NIST SP800-53 (Rev 3 and 4) and DHS 4300A/B controls for testing the security controls within the C&A phase;
• Review security controls using manual processes and automated tools;
• Create, review, edit System Security Plans (SSP);
• Work with ISSOs, developers, and System Owners on the assessment of systems under test;
• Develop Security Assessment Reports (SAR);

Qualifications

• Eligible for Secret, Top Secret or DHS/OBIM/NPPD Clearance
• B.S. from an accredited institution in a Technical or Engineering related discipline. Relevant experience can be substituted in lieu of a degree.
• Five (5) plus years of experience in IT Security with relevant security assessment planning and execution including use of automated assessment tools (Nessus, AppDetective, WebInspect, Core Impact, etc.)
• In-depth knowledge of and experience in applying OMB, DHS 4300A/B, FIPS, NIST SP-800 series standards; related Federal IT security mandates and best practices; and agency specific policies and directives derived from such
• Excellent written and verbal communication skills
• Excellent interpersonal skills

Preferred Qualifications

• Active Secret, Top Secret or DHS Clearance
• DHS Agency or other Component experience
• CISSP, CISA or GIAC Certification