Want to know if you’re a fit? Upload your resume and let our AI show you.
Skills
Analysis Skillsunmatched
Certification & Accreditation Process (C&A)unmatched
Cloud Computingunmatched
Communication Skillsunmatched
Computer Securityunmatched
DoD Directive 8140unmatched
DoD Directive 8570unmatched
IAM - Information Assurance Managementunmatched
Information Technology & Information Systemsunmatched
Internet Securityunmatched
Logisticsunmatched
Outsourcingunmatched
Presentation/Verbal Skillsunmatched
Publicationsunmatched
Riskunmatched
Risk Analysisunmatched
Risk Management Framework (RMF)unmatched
Secret Clearanceunmatched
Security Analysisunmatched
Security Clearanceunmatched
Systems Maintenanceunmatched
T-3 / DS3unmatched
U.S. National Institute of Standards and Technology (NIST)unmatched
United States Department of Defense (DoD)unmatched
Writing Skillsunmatched
Description
CALIBRE is an employee-owned, mission-focused solutions and digital transformation company.
CALIBRE is seeking a Cybersecurity Assessment and Authorization (A&A) Subject Matter Expert (SME) to support the Defense Logistics Agency (DLA). The Cybersecurity A&A SME will provide subject-matter expertise related to the assessment and authorization of information systems and associated cybersecurity policies and procedures.
The selected candidate will execute DoW/DLA cybersecurity processes to authorize information systems, maintain existing system authorizations, and support systems undergoing the authorization process.
Responsibilities
Serve as a cybersecurity subject matter expert for the assessment and authorization of information systems.
Execute DoW/DLA cybersecurity processes supporting initial and ongoing system authorization.
Support information systems throughout the Risk Management Framework (RMF) process.
Assess security controls identified in NIST Special Publication 800-53.
Conduct security-control assessments and authorization reviews for large, complex enterprise environments.
Support the assessment and authorization of large and small enclaves, cloud-hosted services, Operational Technology (OT), Automated Information System (AIS) applications, and outsourced IT processes.
Evaluate identified vulnerabilities and noncompliant security controls.
Determine the residual risk associated with identified vulnerabilities.
Assess the potential impact of cybersecurity vulnerabilities on a system’s current or future authorization.
Brief senior management on the progress, findings, and results of information systems undergoing the RMF process.
Required Skills
Knowledge of the Risk Management Framework.
Knowledge of NIST Special Publication 800-53 security controls.
Knowledge of DoD and DLA cybersecurity policies and procedures.
Ability to assess security controls and conduct authorization reviews.
Ability to evaluate cybersecurity vulnerabilities and determine residual risk.
Ability to assess the impact of security-control deficiencies on system authorizations.
Ability to support the authorization of complex enterprise IT environments.
Strong analytical, risk-assessment, written communication, and presentation skills.
Ability to brief senior management on RMF activities and authorization decisions.
Active Secret security clearance.
DoD-approved 8570/8140 IAM Level III baseline certification.
Moderate Risk, Non-Critical Sensitive Tier 3 (T3), NACLC, or ANACI investigation at the time of proposal submission.
Required Experience
Minimum of five years of relevant Certification and Accreditation or Assessment and Authorization experience.
Experience applying the RMF and NIST assessment and authorization processes.
DoD cybersecurity experience.
Experience assessing security controls.
Experience conducting authorization reviews for large, complex organizations.
Experience supporting cybersecurity authorization activities for enterprise information systems.