Information Assurance Support Level IV

Kalman & Company is seeking to hire an experienced Information Assurance Support Level IV for an onsite position in Edgewood, MD. A Secret level clearance is required and travel both CONUS and OCONUS will be required for this role. Salary Range is $110,000-$120,000/year.

Primary Responsibilities:

• Examine JPEO-CBRND programs and system characteristics to determine whether compliance with DoDI 8500.01 is recommended or required and will develop an acquisition Cybersecurity Strategy when required.
• Ensure that each JPEO-CBRND program, when required, has a Cybersecurity Strategy that is consistent with DoD policies, standards, and architectures, to include relevant standards.
• Assist in the identification of Critical Program Information (CPI) in terms of their importance to the program being developed.
• Assist in the identification of foreign collection threats to the program, identify elements that require classification, and determine the phases at which such classification should occur and the duration of such controls.
• Provide support for Development Test (DT), User Demonstration (UD), User Feedback Event (UFE), Operational Assessment (OA), and Operational Test (OT) events and address each CPI as well as other relevant information requiring protection, including export-controlled information and sensitive buy unclassified information.
• Manage the Host-Based Security System (HBSS) and install, configure, and maintain computer and network security software, including instances of the Assured Compliance Assessment Solution (ACAS), the Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) Viewer, and other cybersecurity software test and scanning software applications.
• Document programs' overall cybersecurity approach and requirements, including determining the appropriate Certification and Accreditation (C&A) process, contributing content for Life Cycle Management Plans (LCMPs), assisting programs in the creation of a Security Classification Guide (SCG), and assisting in the development of Program Protection Plans (PPPs) Appendix E, the Cybersecurity Strategy.
• Manage information-related risks in enterprise architectures, acquisition strategies, and testing and evaluation, and work to achieve cybersecurity C&A.
• Ensure fielded information systems and networks are defended to maintain confidentiality, integrity, availability, authentication, and non-repudiation by identifying, developing, and applying risk management framework technical-, operational-, and management-related security controls and protection mechanisms.
• Guide JPEO-CBRND programs in the development of Acquisition Cybersecurity Strategy.
• Assist in the identification of Critical Technology and address CPI as well as other relevant information requiring protection, including export- controlled information and sensitive but unclassified information.
• Directly interface with JPM customers, representing JPMs/JPLs in discussions concerning cybersecurity, including (but not limited to) topics which address use of the DISA STIG in the software application and system development process, use of the DISA Enterprise Mission Assurance Support Service (eMASS) tool to document program progress during the C&A process, and the Risk Management Framework and its critical alignment with a program's System Development Life Cycle (or Software Development Life Cycle, as appropriate.)
• Leverage SSA services while working in conjunction with JPMs across the JPEO-CBRND to facilitate risk management framework activities.
• This position may require travel up to 20% Continental United States (CONUS) and less than 10% Outside Continental United States (OCONUS).

1. The contractor shall take the International Information Systems Security Certification Consortium (ISC) 2 TM Certified Authorization Professional (CAP) Certification Prep Self Study (11 hours) during on-boarding.

Minimum Requirements:

• US Citizenship is required.
• An Active Secret security clearance.
• Risk Management Framework (RMF) Training
• Hold an active Security + Certification.
• Active CompTIA Advanced Security Practitioner (CASP+) certification
• Eight (8) years of experience providing information technology support services, including information assurance.
• At least five (5) years of comprehensive knowledge of the Microsoft Office suite of software, with specific experience in effective use of Outlook, PowerPoint, Excel, Project and Word.