[Hiring] Security Assessor @Chenega Corporation

Role Description

The Security Assessor will play a critical role in ensuring the security and compliance of the HHS ACL EITS program's information systems. The individual will be responsible for assessing security controls, conducting security audits, and developing secure architectures that align with federal regulations and guidelines, such as FISMA, NIST 800-53, and FedRAMP. The Security Assessor/Security Architect will collaborate with key stakeholders to ensure a secure and resilient environment.

• Conduct comprehensive security control assessments of the HHS ACL EITS systems to ensure compliance with FISMA, NIST 800-53, FedRAMP, and other federal regulations.
• Prepare and present security assessment reports to senior management and government stakeholders.
• Develop and maintain secure architecture designs that comply with federal security standards.
• Collaborate with the Cloud Infrastructure Architect and Application Developers to integrate security controls into system design and implementation.
• Implement security by design principles and ensure all software, systems, and infrastructure meet stringent security requirements.
• Conduct risk assessments to identify and prioritize risks associated with information systems.
• Develop and implement risk mitigation strategies.
• Ensure that security documentation, such as System Security Plans (SSPs) and Risk Management Framework (RMF) artifacts, is up-to-date.
• Perform regular vulnerability assessments and penetration testing.
• Assist in the preparation and execution of Authorization and Accreditation (A&A) packages.
• Work closely with the Authorizing Official (AO) to ensure timely authorization of systems.
• Assist in the incident response process, investigating and reporting security breaches.
• Lead forensic investigations to determine root causes of incidents.
• Prepare post-incident reports detailing findings and actions taken.
• Develop and deliver security awareness training for staff and stakeholders.
• Foster a security-first mindset across the program.
• Other duties as assigned.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or additional experience in lieu of a degree.
• 5+ years of experience in security architecture, security assessment, or a related cybersecurity role within a federal or government environment.
• Certification in the following is preferred: Certified Information Systems Auditor (CISA), or Certified Ethical Hacker (CEH).
• Certified Information Security Manager (CISM) or Certified Cloud Security Professional (CCSP) is a plus.
• Certified Information Systems Security Professional (CISSP), or equivalent experience and knowledge commensurate with certification requirements.
• Ability to pass Public Trust Background Investigation.
• Extensive experience with NIST RMF, FISMA, FedRAMP, and other federal security frameworks.
• Familiarity with cloud security architectures, particularly in Microsoft Azure and/or AWS environments.
• Strong understanding of vulnerability management, penetration testing, and forensic investigation tools.
• Experience with SIEM tools, security monitoring, and incident response frameworks.

Benefits

• Broad range of benefits offered to team members.
• Opportunities for professional development and skill sharpening.
• Supportive culture that encourages team members to do their best work.
• Well-being programs and flexibility for healthy living.