Information Assurance C&A Consultant, Mid

Key Role: Support a high-visibility federal government client in developing and maintaining complex, large-scale certification and accreditation of the agency’s general support systems and in assessing security controls for these systems in accordance with federal requirements. Work with security architects, IT auditors, security engineers, and privacy analysts to define security and functional system requirements, build comprehensive security-related documentation, including system security plans, IT contingency plans, and privacy impact assessments, develop or execute Security Test & Evaluation (ST&E) plans, and conduct risk assessments based on the results of ST&E. Leverage NIST and OMB guidance to integrate risk-based security principles throughout the program implementation life cycle.



Job Requirements













Basic Qualifications:

-4+ years of experience with performing C&A activities covering general support systems and applications

-Experience with implementing NIST publications and guidelines, including SP 800-37, 800-30, 800-34, 800-53, 800-53A, 800-60, and FIPS 199 and OMB regulations, including OMB A-130 and FISMA

-Experience with UNIX and Microsoft Windows technologies, including Windows XP, SQL, Windows 2003 Server, and Microsoft Exchange

-Experience with hardening and assessing network perimeter controls, including firewalls, incident response capabilities, telecommunications devices, and VPN required

-BS or BA degree

 

Additional Qualifications:

-Experience with hardening and assessing database security configurations, including Oracle and SQL

-Experience with completing risk assessments in accordance with NIST

-Experience with developing ST&E plans

-Experience with performing IT audits

-Experience with application development, functional testing, and application-level testing

-Knowledge of proposal development and cost estimating

-Knowledge of mainframe security

-CISA and CISSP Certifications preferred


Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

 

Integrating the full range of consulting capabilities, Booz Allen is the one firm that helps clients solve their toughest problems, working by their side to help them achieve their missions. Booz Allen is committed to delivering results that endure.

 

We are proud of our diverse environment, EOE, M/F/D/V.

 

To apply, go to: