Cleared Principal Cyber Security Consultant
About the position Responsibilities • Support teams in the review and analysis of Security Packages for completeness and compliance with FedRAMP/DoD/NIST requirements. • Assist in the development of Security Assessment Plans (SAP), Security Assessment Reports (SAR), and security briefings. • Validate Cloud Service Provider (CSP) compliance with FedRAMP/DoD/NIST security control baselines through review of evidence, testing, interviews, and analysis of scans, etc. • Familiarity with SSP, SAP, SAR, Plan of Action and Milestones (POA&M) Report, Deviation Requests, Significant Change Requests, Continuous Monitoring artifacts is required. • Conduct client interviews to assess the technical and operational effectiveness of security control implementations. • Assess existing security environments to validate that security implementations remain up to date throughout the life cycle of a system or environment. • Review security documentation and document thorough description of assessment results as part of security testing for assessments. • Understand and have the ability to direct engineers to demonstrate technical security implementations using common Infrastructure as a Service (IaaS) security services. Requirements • 10-15 years of experience supporting cybersecurity assessments. • Related industry certification (e.g., CompTIA, ISACA, ISC2). • Adjudicated Top-Secret (TS) clearance with Sensitive Compartmented Information (SCI). • Current, or ability to obtain AWS Certified Cloud Practitioner (CCP) prior to contract start. Nice-to-haves • In-depth knowledge of GCP, AWS and/or Azure IaaS capabilities and services. • Experience working with within eMASS and/or Xacta. • Experience with DoD CSP SRG guidance, CNSSP 32 and CNSSI 1253. • FedRAMP Assessment Experience. • Active TS/SCI Counterintelligence (arenaflex) Polygraph. Benefits • Competitive salary based on experience and education. Apply tot his job Apply tot his job