Description
We are seeking a Cyber Security STIG Tester to join our GSMO-II team at Ft. Meade, MD. The successful candidate will perform technical security assessments using STIG Checklists, SCAP scans, and ACAS/ESS Scans to identify vulnerabilities and ensure compliance with established Information Assurance guidelines and regulations.
Responsibilities:
- Ensure STIG Checklists are up to date and settings are enforced with minimal operational impact for all systems within the environment.
- Support systems within GMS to have an up to date and complete STIG Checklist.
- Examine results of STIG testing and pass results to system owners and system administrators.
- Track response times to STIG findings and report on the security briefing.
- Support POA&M analysis and coordination efforts, as required.
- Perform cybersecurity lab testing/hardening activities supporting deployment of/updates to computer systems and applications.
- Review data from ACAS/ESS scans and set tickets to add new equipment into scans as necessary.
- Maintain SOP’s for testing and reporting activities.
- Support functional testing as necessary for new technology.
- Perform vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle.
- Support Authorizing Official (AO) actions by ensuring all testing related security testing artifacts are presented in accordance with RMF.
Requirements:
- Bachelor’s degree and 8+ years of experience.
- Prior relevant experience working with STIG Compliance, SCAP tools, vulnerability assessments and reporting.
- Experience performing various types of vulnerability and assessment scans with multiple tools.
- Experience using eMASS and/or Xacta.
- Solid understanding of the Risk Management Framework (RMF) and the System Development Life Cycle (SDLC).
- Understanding of hardware and software engineering best practices.
- Demonstrated analytical and problem-solving skills.
- Current DoD 8570 IAT II Certification is required.
Preferred Qualifications:
- Ability to identify needed changes to processes and activities and help to implement continuous improvement solutions.
- ACAS training completed.
- Ability to work successfully as part of a virtual team.
Salary: $107,900.00 - $195,050.00