By Light Professional IT Services
Senior Information Assurance Analyst
By Light Professional IT Services, Arlington, Virginia, United States, 22201
Responsibilities:
This role focuses on orchestrating, sustaining, and evolving VoIP Projects, Engineering, and Operations that directly support enhancing the security posture of a diverse suite of applications supporting DISA J6 VoIP Network Develop and implement security solutions for VoIP network systems, ensuring compliance with cybersecurity requirements. Support testing and validation in a test environment and manage security aspects in production environments Work closely with the Lead Government Engineer on security analyses using NetScout, Netcool tools, vulnerability assessments, and DISA STIG compliance Integrate security requirements using SecOps methodologies throughout development processes Design and evaluate system-level VoIP Network requirements and implement best security practices. Ability to work 100% onsite Provide technical guidance and training to VoIP team members Required Experience/Qualifications:
5 years of experience that includes supporting Assessment and Authorization (A&A) and information assurance processes and documentation Experience working with software developers and architects to understand security requirements Experience guiding application developers on security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements DISA STIGs and STIG Viewer experience Hands-on experience in developing and validating control implementations and test procedures Knowledge of current security risks and protocols DoD Approved 8570 IA Technical (IAT)/IA Management (IAM) Level 2 Certification (e.g., Security+) Proven experience in system security engineering and familiarity with cybersecurity frameworks Strong analytical skills with experience in TLS/IPsec, VPN Tunneling, eVPN, vulnerability analysis, PKI Certificate Management, and risk assessments Work on VoIP Telephony systems with a multidisciplinary team Opportunity to apply best practices in architecture design, VoIP services, and platform integration Proven experience in system security engineering and familiarity with cybersecurity frameworks. Ability to coordinate security activities and lead technical aspects of security audits Experience in developing and implementing technical solutions to enhance system security. Experience with Risk Management Framework (RMF), NIST SP 800-53, Security Technical Implementation Guides (STIGs) Special Requirements/Security Clearance:
Secret clearance required
This role focuses on orchestrating, sustaining, and evolving VoIP Projects, Engineering, and Operations that directly support enhancing the security posture of a diverse suite of applications supporting DISA J6 VoIP Network Develop and implement security solutions for VoIP network systems, ensuring compliance with cybersecurity requirements. Support testing and validation in a test environment and manage security aspects in production environments Work closely with the Lead Government Engineer on security analyses using NetScout, Netcool tools, vulnerability assessments, and DISA STIG compliance Integrate security requirements using SecOps methodologies throughout development processes Design and evaluate system-level VoIP Network requirements and implement best security practices. Ability to work 100% onsite Provide technical guidance and training to VoIP team members Required Experience/Qualifications:
5 years of experience that includes supporting Assessment and Authorization (A&A) and information assurance processes and documentation Experience working with software developers and architects to understand security requirements Experience guiding application developers on security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements DISA STIGs and STIG Viewer experience Hands-on experience in developing and validating control implementations and test procedures Knowledge of current security risks and protocols DoD Approved 8570 IA Technical (IAT)/IA Management (IAM) Level 2 Certification (e.g., Security+) Proven experience in system security engineering and familiarity with cybersecurity frameworks Strong analytical skills with experience in TLS/IPsec, VPN Tunneling, eVPN, vulnerability analysis, PKI Certificate Management, and risk assessments Work on VoIP Telephony systems with a multidisciplinary team Opportunity to apply best practices in architecture design, VoIP services, and platform integration Proven experience in system security engineering and familiarity with cybersecurity frameworks. Ability to coordinate security activities and lead technical aspects of security audits Experience in developing and implementing technical solutions to enhance system security. Experience with Risk Management Framework (RMF), NIST SP 800-53, Security Technical Implementation Guides (STIGs) Special Requirements/Security Clearance:
Secret clearance required