Security Specialist Mid

Support the execution and support of the Security Authorization (SA) process for current inventoried FISMA systems.

• All necessary operations, maintenance, security, and compliance activities required to ensure the continuous, secure, and effective functioning of these systems in accordance with federal regulations and agency policies. 
• The security authorizations will determine the extent to which NIST defined security controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the 151-information system.
• Document the SA results in the Government directed management tool (ex: CSAM). 
• conduct a briefing of the testing results with the System Owner, ISSO, and the Authorizing Official.

• Bachelor’s Degree in Computer Science or a related field or equivalent experience.
• Minimum 5 years of information security experience.
• US Citizenship / No Dual

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

• Solid knowledge of FISMA, NIST, and the Risk Management Framework (RMF) methodology.
• Experience with security authorization processes (Certification & Accreditation and Authorization to Operate) and the ability to develop associated documentation.
• Strong understanding of security tools, hardware/software security implementation, communication protocols, and encryption techniques.
• Strong written and verbal communication skills.

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.