NCP is seeking a Security Analyst to work on project teams responsible for managing and coordinating Authorization & Accreditation (A&A) security activities and requirements for software products, including attaining Authorities to Operate (ATOs) within an IT Product Line at the Department of Veterans Affairs (VA). In addition, the Security Analyst works with the Product Line Operations manager to support other security/operational related activities.
Key Responsibilities:
- Work with the VA security engineering teams and development teams to ensure that all requirements and artifacts for a product’s Authority to Operate (ATO) are completed in a timely manner and maintained and updated in the Enterprise Mission Assurance Support Service (eMASS)
- Post all required security artifacts in the approved VA tool – eMASS – on behalf of VA employees and developers
- Assist developers with completing security artifacts and maintain these finalized documents in eMass
- Work with the VA engineers, Information Security Officers (ISO), and third-party development vendors to conduct vulnerability assessments on all software products, interpret, and remediate findings.
- Provide training on all pertinent security requirements to stakeholders, business sponsors, and PMO and development team members.
- Provide regularly scheduled status reports that summarize all security-related activity, with emphasis on high-risk activities and potential/actual security breaches and violations
- Develop and track Program Objective and Milestones (POAM) to reflect current status of satisfying ATO and security requirements
- Facilitate working sessions with security and information assurance teams for eMASS issue resolution.
- Develop the sequenced schedule of planned security activities to submit the completed ATO package
- Keep informed on policy changes related to VA security activities, and report back to VA project manager/clients on any changes; assist the project manager with complying to the changes
- Work proactively and independently to carry out assignments to completion within parameters of instructions given, prescribed routines, and standard accepted practices.
Requirements:
- 7 years of information security experience
- Experience working in eMASS security document management system
- Experience with the Department of Veterans Affairs (VA)
- Mastery of ATO process and working knowledge of MOU/ISAs
- Able to work with multiple systems and System Stewards
- Experience with Jira
- Ability to create and deliver presentations in MS PowerPoint on Security related topics
- Must be a U.S. Citizen or Permanent Resident
- Must be able to obtain a Public Trust Clearance
Job Type: Full-time
Pay: $90,000.00 - $115,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Health insurance
- Paid time off
- Professional development assistance
- Retirement plan
- Vision insurance
Compensation package:
- Bonus pay
- Performance bonus
- Yearly pay
Schedule:
Experience:
- Information Security: 5 years (Required)
- eMASS: 1 year (Required)
- Department of Veterans Affairs (VA): 1 year (Required)
Work Location: Remote
Looking for remote jobs near your area? At Yulys, thousands of employers are looking for exceptional talent like yours. Find your perfect fit now.
