Senior Information Security Manager - RMF & Incident Response

Castalia Systems; Arlington (VA); On-site; USD 102,000 - 108,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k matching

Generous PTO

Paid holidays

Professional training opportunities

Pet insurance

Job summary

Castalia Systems seeks an Information Systems Security Specialist to support the Hunt and Incident Response Team (HIRT) securing the Nation’s cyber and communications infrastructure. You will lead RMF lifecycle activities, coordinate with ISSM and CISO, and provide frontline cyber expertise across multiple projects.

This role requires TS/SCI clearance, hands-on experience with Linux and AWS, RMF/ATO, and risk analyses.

Qualifications

• BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience.
• 5+ years of directly relevant experience in information security management
• Hands‑on experience with Linux operating systems or Amazon Web Services
• Experience supporting the RMF process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management
• Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Management planning and execution
• Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks
• Ability to apply comprehensive knowledge across key tasks and high impact assignments
• Knowledge of Computer Network Defense (CND) policies, procedures & regulations
• Knowledge of defense-in-depth principles and network security architecture
• Knowledge of ATO requirements and strong experience with POAMs.
• Knowledge and experience with full range of Microsoft Office products (Word, Excel, PowerPoint, and Visio)
• Knowledge of boundary protection and network segmentation
• Knowledge of authentication and access management techniques
• Experience with implementing and assessing security controls for hardware, software, and network deployments
• Must be able to work collaboratively with internal and external stakeholders across physical locations

Responsibilities

• Manage full RMF lifecycle for IT systems.
• Assist technical/management leadership on major tasks or technology assignments.
• Establish goals and plans that meet project objectives.
• Assist in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met.
• Participate in client negotiations and interfacing with senior management.
• Support decision making and domain knowledge that may have a critical impact on overall project implementation.
• Provide support to plan, coordinate, and implement a cybersecurity lab’s information security.
• Provide support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems.
• Assist the efforts of security staff to design, develop, engineer and implement solutions to security requirements.
• Implementing and development of the DHS IT security standards
• Gathering and organizing technical information about the lab’s mission goals and needs, existing security products, and ongoing programs
• Performing risk analyses which also includes risk assessment
• Planning and leading major technology assignments
• Evaluating performance results and recommending major changes affecting short-term project growth and success
• Functioning as a cyber technical expert across multiple project assignments
• Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs

Skills

Linux / AWS

RMF / ATO Experience

RMF & A&A Docs

Complex Project Experience

CND Policies

Defense-in-Depth

POAM Management

MS Office Pro

Access Management

Security Controls

Team Collaboration

Stakeholder Engagement

Education

Bachelor's degree in Information Management / Cybersecurity / CS

High School Diploma with 7+ years information security management experience

Tools

CSAM/Xacta/Archer/RegScale

Nessus / Security Center / Tenable

Nmap / Wiz / Burp

CrowdStrike / CarbonBlack

Splunk / SOAR / ELK

Python / AWS CLI / Lambda / Bash / PowerShell

Job description

Castalia Systems seeks an Information Systems Security Specialist to support the Hunt and Incident Response Team (HIRT) securing the Nation’s cyber and communications infrastructure. You will lead RMF lifecycle activities, coordinate with ISSM and CISO, and provide frontline cyber expertise across multiple projects.

This role requires TS/SCI clearance, hands-on experience with Linux and AWS, RMF/ATO, and risk analyses.