Information Security SME(s) with TS/SCI

Job Summary

Vosago is seeking Cybersecurity SME(s) to support a CISA cyber security program.

Position: Full-time

Citizenship: U.S. Citizenship

Location:  Arlington, Virginia or Corry Station, Pensacola, Florida
Work under this contract will primarily be performed at the Contractor’s facility. Work may also be performed at the following Government locations and through telework:
The primary place of performance will be the proposed contractor facility. However, Contractors requiring SCIF access will be required to report to the CISA 4601 address at N. Fairfax Drive in Arlington, Virginia (Ballston One) or Corry Station, Pensacola, Florida. Due to limited office space within Government facilities, the Contractor and subcontractor personnel may be required to work from the prime or subcontractor facilities when adequate workspace is not available at the Government site

Clearance: TS/SCI

Responsibilities and Duties:

The SME Information Security Analyst is responsible for leading the RMF assessment, authorization, and monitoring steps for systems following NIST and ICD 503 standards and best practices.
The purpose of this Statement of Work (SOW) is to obtain administrative security support, security evaluation, risk management, and security monitoring and incident response services for CISA, CSD, and CISA supported initiatives. The Mission Engineering (ME) Information Security Branch (ISB) is responsible for providing Cybersecurity and Information Assurance support for CSD. ISB manages the Security Authorization process, performs management of policy and security requirements, compliance certification and vulnerability analysis to ensure authorized CSD systems meet FISMA requirements


Required Qualifications and Skills


10+ years of proven experience performing security controls.
The SME Information Security Analyst must maintain ongoing knowledge of Federal policies and practices related to cyber security; possess excellent verbal and written communication skills; have knowledge, skills, abilities, and experience with common assessment & authorization (A&A) application platforms (e.g. eMASS, CSAM, Xacta is preferred) for performing tasks in Section 6.3. and strong architecture, network and infrastructure security, or next gen security expertise (agile/hybrid agile, cloud).
The SME Information Security Analyst must have extensive experience working with various security methodologies and processes, compliance controls related to cloud security, performing assessments in cloud computing environment, extensive experience providing analysis and trending of vulnerability data form a large number of heterogeneous devices, and must possess expert knowledge in risk and vulnerability management.
The SME Information Security Analyst requires an active clearance up to TS/SCI security clearance.
Preferred Qualifications and Skills

Agency experience (ideally DHS/CISA)