Description:

cFocus Software seeks a Jr. Principal Security Consultant to join their program supporting USITC.
This position is fully remote and requires an active TS/SCI clearance.
The consultant will conduct an Assessment and Authorization (A&A) review for each of the systems, funded on a rotational basis, ensuring compliance with all federal and agency requirements.
The consultant will review all A&A supporting documentation to ensure correctness and consistency.
The role involves providing security and privacy expertise and guidance to ensure the consistent application of A&A processes.
The consultant will maintain and provide reports on the status of all A&A materials and supporting documentation.
The position requires verifying that the implementation of controls is consistent with the system security plan (SSP) and system privacy plan, as well as corresponding NIST control requirements.
The consultant will conduct scanning of websites, network devices, workstations, and servers.
The role includes providing A&A expertise in the application of best practices to standardize and enhance A&A processes, ensuring compliance with NIST 800-37, Revision 2.

Requirements:

A degree in Computer Science, Information Systems, Engineering, Business Administration, or other related discipline is preferred.
The candidate must have 10+ years of Cybersecurity engineering experience.
The candidate must have 10+ years of experience with NIST 800 Series, FIPS 199 & 200, FISMA, and FedRAMP.
The candidate must possess at least one of the following certifications: CASP+, CySA+, or CISSP.

The position offers a fully remote work environment.
The role provides an opportunity to work on significant cybersecurity projects supporting USITC.
The position allows for professional growth and development in the field of cybersecurity.
The consultant will be part of a team that values expertise and best practices in security and privacy.