Senior Information Security Consultant

BearingPoint, Inc. (NYSE-BE) is one of the world's largest Management and Technology Consulting companies dedicated to aligning business and systems to empower Global 2000 companies and government organizations.The Public Sector Security Solutions Group is seeking a Senior Information Security Consultant to support a DoD Agency with technical programmatic biometric, Smart Card focus. The position requires the ability to leverage more technically focused personnel into an assessment of both application and infrastructure security. The candidate will possess a high level understanding of application and hardware architecture so as to efficaciously apply the principles of Information Security to various scenarios. The candidate will have had prior experience working with a wide variety of technologies, be well versed in the current state of Information Security, and be able to interpret the requirements of relevant governing bodies (, etc).Responsibilities:Provide information assurance support personnel to consult on system compliance with the Defense Information Technology Security Certification and Accreditation requirements.
Support security assessment for our client’s systems and applications.
Assist with preparation and review of Defense Information Technology Security Certification and Accreditation Process (DITSCAP) documentation.
Assist with mitigation of identified risks to ensure compliance with DoDI 8500.2 and other applicable regulations.
Develop and monitor processes to ensure security procedures are followed. Security processes involve the full range of program related activities needed to guard against identified threats (e.g., design, software and documentation development, installation/implementation, training, maintenance, etc.). Mitigation of threats can range from program specific processes to DoD mandated processes such as the Information Assurance Vulnerability Alert (IAVA) program and related periodic and ad-hoc initiatives.
Recommend security-training requirements for application end users.
Develop System security plans, Disaster Recovery plans, Contingency plans,
Perform system categorization, system test and evaluation
Manage compliance with Information Assurance Vulnerability Alerts (IAVA) using the Vulnerability Management System (VMS)Requirements:
3+ years experience with software development and application architecture

2+ years experience with various operating environments (Windows, Unix, Sun, Mainframe, etc;
and familiarity with PKI, biometric, and Smart Card technologies, including FIPS 201 and related NIST special publications

2 years experience with and Knowledge of Federal Regulations related to Information Security (FISMA, Computer Security Act, OMB A-130, etc)

2 years experience and Knowledge of DOD Information Security policies, and experience conducting C&A using the DITSCAP process

Knowledge of NIST pubications specific to Risk Assessment, C&A and FISMA
Job Overview
Company: