- Lead IT Security Control Assessments within cloud-based environments in accordance with NIST SP 800-53, 800-37, OMB, and other authoritative IT security guidance
- Validate information system security plans, supporting policies and procedures, and the documentation and implementation of controls in accordance with NIST requirements
- Develop plan and execute Security Assessment Plans (SAP), document findings within Security Assessment Reports (SAR)
- Provide direction for scheduling, project sequencing, and resource management
- Assist with managing client expectations and performing project management
- Prepare, review, and/or update, and maintain IT Security supporting artifacts
- Develop System Security Plans, Continuous Monitoring Plans, Incident Response Plans
- Plan, schedule, coordinate, prepare, execute, document the results of test plans and test scripts, incident response, contingency, and continuity of operations drills, exercises, and activities
- Provide IT security guidance to Information System Owners
- Plan, coordinate, support, and assess system vulnerability scans and assessments, and assist in completing remedial actions, as necessary
- Provide IT System Security consultation
- Deep experience with government compliance, including FISMA, FedRAMP, DIACAP, DoD RMF.
- Strong knowledge of NIST Special Publications 800-30, 800-37, 800-53
- Experience with every step within the delivery of Certification and Accreditation (C&A) / Assessment and Authorization (A&A) packages that have obtained and maintained full authorization to operate (ATO).
- Experience with Virtualization/Cloud technologies (required)
- Security focused industry certification as a CISA, CISM, CISSP, CCSP, CCISO, or similar certification (required)
- Additional industry certifications such as MCSD, MCSE, CCNA, etc. (preferred)
- Educational degrees in IT and/or Business (preferred)
- Regional leaders (participating in IIA, ISACA, ISSA, etc.)
- At least 5-10 years of experience as a consultant within professional IT services
- Excellent verbal and written skills
- Willing to travel up to 25%
Coalfire’s high energy, challenging, and fast-paced work environment will keep you engaged and motivated. Work-life balance is a core priority at Coalfire – we work hard and we play hard, and the two often overlap. We host family-friendly events and happy hours along with professional meetups and informal networking sessions, and we’re active in our communities. Plus, we offer great benefits, including:
- Health, dental, and vision insurance with an employer contribution;
- Paid time off and accrued sick days;
- A generous 401(k) plan;
- A kitchen stocked with snacks, coffee, and tasty beverages.