Paradyme Management
Information Assurance Specialist (Top Secret Clearance required)
Paradyme Management, Clarksburg, West Virginia, us, 26306
Overview:
Paradyme Management is a rapidly growing government technology leader that puts service first, for its customers, its team and the communities it supports. Paradyme harnesses DevSecOps and Agile development processes to deliver exceptional results for digital transformations. With headquarters office in Tysons Corner, VA, Paradymes award-winning culture sets it apart through its teams deep commitment to service and collaboration with its customers, each other and the community. Learn more at www.paradymemanagement.com.This position will support a federal law enforcement customer located in Clarksburg, WV. Hybrid work schedule, usually 4 days/wk Remote with 1 day/wk in the Office.Responsibilities:The IA Specialist will support O&M for our Federal customer's lifecycle security model that develops, maintains, and dispositions information systems, services, and data, and safeguards confidentiality, integrity, and availability. The candidate will coordinate with system personnel to ensure systems are operated and maintained in accordance with security policies and practices and reports all information system security incidents through the appropriate customer channels.Desired Job Skills include experience with the following:Reviewing information systems to ensure that the management, operational, personnel, and technical controls are functioning effectively during all phases of the system lifecycleIdentifying and evaluating technical and operation security risks, threats, weaknesses, and vulnerabilities associated with information systemsDemonstrating experience in information system compliance with government standards and industry best practices (e.g. NIST, OWASP, Common Criteria, DISA and SANS Institute)Agile development methodologiesDemonstrating experience in information security practices within the federal and/or state governmentsKnowlege of, or hands-on experience with, Linux and Cloud based systems.Encryption principlesCertifications: CompTIA Security+ or equivalent preferredClearance:
Active Top Secret (TS) is requiredEducation: Bachelors Degree PreferredThe candidate may assist in or perform the following functions:Assist ISSOs in periodically reviewing the information system to ensure the management, operational, personnel, and technical controls are functioning effectively during all phases of the system lifecycleAssist stakeholders in assessing information systems and identifying and evaluating technical and operational security risks, threats, weaknesses, and vulnerabilitiesReview and process change requests or working with change management tools to assess security impact of changes to customer systemsCollaborate with operational personnel and IA professionals to continuously improve system security posture, capturing and producing artifacts, and validating POA&MProvide analysis via knowledge of NIST 800-53 Recommended Security ControlsImplement precautionary measures to prevent introduction and/or proliferation of malicious code and/or activitiesMaintain Information System security featuresEnsure annual FISMA requirements are completed on time and conduct and work with the designated personnel to complete incident response and contingency plan exercisesConduct annual security control reviewsTroubleshoot with internal and external user community on access issuesEnsure Privileged Users (PU) complete mandatory trainingCreate, modify, or delete user and service accounts and sharing permissionsImplement approved security-related enhancements and/or modifications to the operations and security posture of the system or serviceEnsure critical system and service security patches and/or hot fixes are kept currentPossess a workable knowledge of the SSP for the assigned system or service and creating, editing, and updating the PUGs and GUGs for the assigned system or serviceServe as the Registration Authority (RA) for a respective systemMonitor and review security logs, system logs, and audit logs via SplunkUtilize host-based intrusion detection software to identify and validate all changes to the OS and other critical files to ensure these configurations remain in known and trusted statesConduct Security Scan reviews for remediation and validationAssist and participate in Annual Security Training and Exercises
EEO Statement:Paradyme is a federal contractor and an EEO and an Affirmative Action Employer. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, pregnancy-related disability, physical or mental disability, genetic information, sexual orientation, marital status, familial status, personal appearance, occupation, citizenship, veteran or military status, gender identity or expression, or any other characteristic protected by federal, state or local law.Paradyme Management, Inc. is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Paradyme will take the steps to ensure that people with disabilities are provided reasonable accommodations. Accordingly, if a reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact Rose Luczak, Director of People Operations at rose.luczak@paradyme.us or at (571) 289-0548.
Paradyme Management is a rapidly growing government technology leader that puts service first, for its customers, its team and the communities it supports. Paradyme harnesses DevSecOps and Agile development processes to deliver exceptional results for digital transformations. With headquarters office in Tysons Corner, VA, Paradymes award-winning culture sets it apart through its teams deep commitment to service and collaboration with its customers, each other and the community. Learn more at www.paradymemanagement.com.This position will support a federal law enforcement customer located in Clarksburg, WV. Hybrid work schedule, usually 4 days/wk Remote with 1 day/wk in the Office.Responsibilities:The IA Specialist will support O&M for our Federal customer's lifecycle security model that develops, maintains, and dispositions information systems, services, and data, and safeguards confidentiality, integrity, and availability. The candidate will coordinate with system personnel to ensure systems are operated and maintained in accordance with security policies and practices and reports all information system security incidents through the appropriate customer channels.Desired Job Skills include experience with the following:Reviewing information systems to ensure that the management, operational, personnel, and technical controls are functioning effectively during all phases of the system lifecycleIdentifying and evaluating technical and operation security risks, threats, weaknesses, and vulnerabilities associated with information systemsDemonstrating experience in information system compliance with government standards and industry best practices (e.g. NIST, OWASP, Common Criteria, DISA and SANS Institute)Agile development methodologiesDemonstrating experience in information security practices within the federal and/or state governmentsKnowlege of, or hands-on experience with, Linux and Cloud based systems.Encryption principlesCertifications: CompTIA Security+ or equivalent preferredClearance:
Active Top Secret (TS) is requiredEducation: Bachelors Degree PreferredThe candidate may assist in or perform the following functions:Assist ISSOs in periodically reviewing the information system to ensure the management, operational, personnel, and technical controls are functioning effectively during all phases of the system lifecycleAssist stakeholders in assessing information systems and identifying and evaluating technical and operational security risks, threats, weaknesses, and vulnerabilitiesReview and process change requests or working with change management tools to assess security impact of changes to customer systemsCollaborate with operational personnel and IA professionals to continuously improve system security posture, capturing and producing artifacts, and validating POA&MProvide analysis via knowledge of NIST 800-53 Recommended Security ControlsImplement precautionary measures to prevent introduction and/or proliferation of malicious code and/or activitiesMaintain Information System security featuresEnsure annual FISMA requirements are completed on time and conduct and work with the designated personnel to complete incident response and contingency plan exercisesConduct annual security control reviewsTroubleshoot with internal and external user community on access issuesEnsure Privileged Users (PU) complete mandatory trainingCreate, modify, or delete user and service accounts and sharing permissionsImplement approved security-related enhancements and/or modifications to the operations and security posture of the system or serviceEnsure critical system and service security patches and/or hot fixes are kept currentPossess a workable knowledge of the SSP for the assigned system or service and creating, editing, and updating the PUGs and GUGs for the assigned system or serviceServe as the Registration Authority (RA) for a respective systemMonitor and review security logs, system logs, and audit logs via SplunkUtilize host-based intrusion detection software to identify and validate all changes to the OS and other critical files to ensure these configurations remain in known and trusted statesConduct Security Scan reviews for remediation and validationAssist and participate in Annual Security Training and Exercises
EEO Statement:Paradyme is a federal contractor and an EEO and an Affirmative Action Employer. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, pregnancy-related disability, physical or mental disability, genetic information, sexual orientation, marital status, familial status, personal appearance, occupation, citizenship, veteran or military status, gender identity or expression, or any other characteristic protected by federal, state or local law.Paradyme Management, Inc. is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Paradyme will take the steps to ensure that people with disabilities are provided reasonable accommodations. Accordingly, if a reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact Rose Luczak, Director of People Operations at rose.luczak@paradyme.us or at (571) 289-0548.