Vacancy expired!
DSA is looking to find a Senior Security Analyst-Xacta Lead in the DC area. The ideal candidate will report directly to the program manager and have strong analytical and leadership skills and the ability to lead teams and tasks with limited supervision. The Governance, Risk, and Compliance (GRC) Security Analyst - Xacta Lead will be an integral part of a team responsible for supporting the development and maturation of an Agency-wide information security (InfoSec) program for a large civilian Federal agency. The candidate should have strong GRC tool (e.g., Telos Xacta, CSAM, etc.) experience and technical and data analysis skills. The candidate will serve as a subject matter expert with regards to the Risk Management Framework (RMF) and all associated information security policies and procedures and should possess in-depth knowledge of applying, selecting and testing the NIST family of security controls.Primary Responsibilities:
Providing administrative support in response to Telos Xacta (or other GRC tool) customer requests for:
o Access Issues
o Accounts Creation
o Project Registration
o Project Modification Support
o General Troubleshooting
Authoring Xacta operational procedures and providing customer training.
Performing authorized outages and functionality testing in support of new application and software releases.
Capturing relevant reporting metrics; information will be formalized and presented to program leadership in support of monthly reporting requirements.
Developing and implementing corrective measures for database issues/problems found during tool monitoring.
Reviewing existing workflow configurations and provide design guidance for improvements.
Implementing and managing NIST RMF requirements within the application.
Developing NIST documentation in Xacta utilizing extensible publishing and XML (templates, reference sheets, and supporting documentation).Minimum Qualifications:
ship.
Bachelor's degree in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline is required. Four (4) additional years of experience in IA/Information Security will be an acceptable substitute for a Bachelor's degree.
Minimum of seven (7) years related general experience and at least five (5) years of IA specialized experience, including four (4) or more years of Telos Xacta IA Manager or a similar GRC tool.
Knowledge of IT security concepts, assessment processes, and high-level controls used for validating compliance.
Understanding of major GRC security regulations/assessment processes (NIST 800-53, NIST 800-37, ISO 27001 and related primary security regulations).
XML Experience (schema development, general content creation).
Use of advanced Excel topics (formulas, macros, VBA).
Basic understanding of scripting languages (perl, velocity, UNIX scripting, javascript, etc.).
Ability to handle general content management tasks (archiving, versioning, SVN would be helpful).
Written and oral communication skills including the ability to communicate complex technical issues to stakeholders and non-technical staff.
Knowledge and understanding of integrating the security lifecycle into the system development lifecycle (SDLC).Preferred Abilities, Skills, and Tool Experience
Telos Xacta IA Manager or another GRC tool (e.g., CSAM, RSA Archer, etc.)
CDM Dashboard
Advanced programming experience (velocity, velocity tools, java string methods)
Experience with Regular Expressions (Regex).Preferred Qualifications:
CISSP, CISM or equivalent advanced security certification.
Interest in learning the concepts of business development and capturing new business.
COVID-19 continues to significantly impact our communities, families and employees. With employee health and safety as our top priority DSA is taking action to address the increased risk and uncertainty COVID variants pose in the workplace. DSA, will require all newly hired employees to be fully vaccinated before their start date and show proof of vaccination on the first day of employment along with all I9 required forms. These forms are only to be provided via instruction from HR and with approval from DSA management for any access to customer facility. Salary and Benefits include but not limited to:
