[Moo] Off topic - more job listings

[Abel Sussman]

Since its a nice snowday for updating your resume.... there are two
positions with the firm I am with right now:

Title:  Project Control Analyst
Location: Reston, VA/Periodic Travel to DC
Position Description and Duties
VMD Systems, a Prime Contractor to the FAA, is in need of a Project Control
Analyst to work with us on a long-term contract with the FAA's Office of
Security and Privacy.  The Project Control Analyst will support the
Compliance and Risk Management activities for FAA non-NAS information
systems.  Duties include managing project schedules, project communication,
team coordination, and related project management and administrative duties.
Responsibilities will include:
-    Point of contact to assist, arrange and coordinate telcons, meetings,
schedules, personnel rosters, and material printing.
-    Participate in and support customer meetings.
-    Write, edit, and perform quality assurance on security certification
and authorization documents.
-    Review client deliverables for content and consistency, and provide
input or commentary on the substance of the security artifacts.
Education/Knowledge/Skills:
Required:
-    Two (2) years experience in project control and writing/editing
technical materials
-    Bachelor's Degree in a suitable discipline
-    Strong written and verbal communication skills
Strongly Preferred:
-    One (1) year experience in cybersecurity / information security domain.
-    Familiarity with NIST Special Publications (specifically, SP 800-37
and 800-53)
-    Proficiency with Microsoft Office Suite and Similar Document
Management Tools (i.e., SharePoint, Word, Excel, Visio, Adobe Acrobat)

Title: Sr. Cert System Sec/Info Assurance Analyst
Location: Reston, VA/Periodic Travel to DC
Position Description and Duties
VMD Systems, a Prime Contractor to the FAA, is in need of a Senior
Certified Systems Security Analyst (SCSSA) to work with us on a long-term
contract with the FAA's Office of Security and Privacy. The SCSSA will
support the Compliance and Risk Management activities for FAA non-NAS
information systems. Duties include conducting security control assessment
reviews, risk assessment reports, vulnerability scan analysis, and related
project management and administrative duties.
Responsibilities will include:...
- Provide ongoing full life-cycle Assessment and Authorization (A&A)
security support for the client in compliance with the NIST standards.
- Develop, review, prepare and analyze NIST based A&A documents, such as
System Security Plans (SSPs), Disaster Recovery and Test Plans and perform
Risk Assessments/Security Assessments.
- Prepare A&A packages including interviewing stakeholders and clients,
analyzing and developing documentation and creating security architecture
diagrams.
- Perform vulnerability assessments and develop mitigation strategies and
provide A&A briefings to Senior Government Executives and other duties as
required.
Education/Knowledge/Skills:
Required:
- Ten (10) years relevant experience
- Bachelor's Degree in a suitable discipline
- CISSP Certification
- Strong understanding of NIST RMF process and associated artifact
development (SP 800-37 and 800-53)
- Strong written and verbal communication skills
Strongly Preferred:
- Knowledge of McAfee Vulnerability Manager and HP WebInspect
- Ability to excel in a time sensitive environment.
- Proficiency with Microsoft Office Suite and Similar Document Management
Tools (i.e., SharePoint, Word, Excel, Visio, Adobe Acrobat)


Please contact me off list if you are interested.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.stierbach.org/pipermail/moo-stierbach.org/attachments/20131210/bcb6a21d/attachment-0002.htm>