Critical Infrastructure Protection Specialist - TS Clearance

Critical Infrastructure Protection Specialist - TS Clearance Critical Infrastructure Protection Specialist - Top Secret Clearance - VA/DC

Skills Required - Top Secret Clearance, Critical Infrastructure Protection CIP, SABSA Sherwood Security Architecture, Enterprise Security Management, Operational Risk Management, DHS and NIST Security Policies, Comprehensive National Cyber security Initiative (CNCI), Consensus Audit Guidelines (CAG), National Infrastructure Protection Plan (NIPP)

Critical Infrastructure Protection Specialist - Top Secret Clearance - VA/DC

IF YOU DO NOT HAVE AN ACTIVE TOP SECRET CLEARANCE YOU ARE NOT ELIGIBLE FOR CONSIDERATION FOR THIS POSITION

We are an information technology and strategic business consulting firm focusing on improving business performance through the use of technology and information analysis. We have developed a company to work in one of two areas: enabling success and/or stabilizing activities.

Our team consists of experienced consultants in the areas of emerging technologies, enterprise integration/operation, e-government, enterprise business applications, and strategy/business process improvement. Our experiences and capabilities expand both the public and private domains.

Responsibilities:

* Support client by providing strategic planning, technical and subject matter expertise in cyber security, malicious software, viruses and other forms of attacks against the nation's cyber infrastructure.
* Support the identification of various threats, provide leadership in identification of the nature and impact of these threats and lead the development of mitigation and protection strategies to minimize the impact and risk to these threats.
* Support the client by developing written presentations and communications of these threats of various government and industry partners.
* Analyze security related issues and provide recommended resolution of major/critical problems.
* Leverage a strong IT security background in the identification and assessment of cyber security mechanisms of both applications and general support systems.
* Provide general and technical advice and assistance on the interpretations of cyber security requirements, developing and presenting briefings and incident information, analysing regulatory/legislative requirements for cyber security.

Requirements:
* BA or BS degree is preferred.
* 7+ years of experience with federal IT security.
* CISSP, CISM, or similar information security professional certification is preferred.
* Relevant security experience with SABSA, Operational Risk Management, Enterprise Security Architecture.
* Experience in the life cycle of cyber security and computer network security technical and programmatic operations. This includes experience in:
* Penetration testing and other cyber security automated testing and monitoring tools (Not vulnerability scanning).
* Virus/malicious software identification and management.
* Computer network monitoring.
* Security tool development.
* Development of strategies for managing a cyber/computer security event.
* Threat Modeling.
* Developing Policy, Procedure and Standards.
* Cyber security best practices.
* Experience with DHS and NIST security policy and be able to review against Security Architecture technical requirements.
* Knowledge of enterprise security architecture, SABSA, network design, and operational risk management.
* Familiarity with existing risk management frameworks, such as COBIT, ITIL, and ISO 27001.
* Knowledge of Comprehensive National Cyber security Initiative (CNCI), Consensus Audit Guidelines (CAG), and NIST 800-53/800-53-A.
* Commercial or Government Security or Risk Compliance/Certification experience (PCI, FISMA, additional Risk Management compliance).
* Working knowledge of Homeland Security Presidential Directive -7 Critical Infrastructure Identification, Prioritization, and Protection.
* Familiarity with government standards and guidance for cyber security on classified systems.
* National Infrastructure Protection Plan (NIPP), training and exercises involvement IT and cyber incidents.
* Experience with Open Source Collaboration activities.
* Strong written and verbal communications skills, including technical writing and presentation (Skilled in PowerPoint, Word, Excel, Visio, Project. With the ability to create simple graphics/flowcharts and format documents).
* Ability to lead working sessions and stakeholder meetings.
* Commercial business experience.