Essential Functions:

This individual’s primary responsibility will be to track efforts and perform tasks related to A&A within VA to ensure assigned information systems, devices, and networks can obtain and maintain Authorization to Operate (ATO) and other decisions. This individual will plan, coordinate, and lead teams to conduct assessments of information systems and networks to identify vulnerabilities, risks, and security requirements in accordance with the VA A&A process. Secondary responsibilities include testing CCIs, validating Security Plans, weekly status updates, and extensive work in eMASS packages. This individual will be responsible for supporting VA SCARs, the VA Security Control Assessor (SCA), and other VA cybersecurity leadership in the execution and enforcement of VA Cyber Security and RMF process. Position is 100% remote Monday - Friday 800AM EST to 430PM EST

Required Experience:

1+ years of experience performing Information Assurance (IA) controls analysis, testing, and risk assessments
1+ years of experience with Nessus, Nmap, Burpsuite,, Linux security (RHEL7), AWS cloud security
Working knowledge of eMASS (Enterprise Mission Assurance Support Service)
Knowledge of NIST SP 800-53 and 800-37, CNSSI 1254, and other VA Risk Management policies
Ability to identify and evaluate major applications, infrastructure, enclaves, and Enterprise environments based on accreditation boundaries
Knowledge of defense-in-depth and other information security and assurance principles and associated supporting technologies
Familiarity with the use of vulnerability scanning and assessment tools necessary to identify and document compliance
Capable of providing thoughtful feedback to the ISO, ISSO and other VA Cyber Security leadership in to identify risks, communicate recommended courses of action, and recommend process improvements

Desired Experience:

Experience with VA Cyber Security
Ability to work as an independent security practitioner and participate in a small team of security personnel reviewing the same system
Ability to communicate effectively both verbally and in writing
Ability to organize, analyze, and write technical documents that can be understood by non-technical individuals
Experience with Prisma Cloud/Twistlock and containerization

DPCG is an Equal Opportunity Employer committed to hiring and developing the most qualified individuals based on merit, experience, and business needs, without regard to any protected status under applicable law.