Security/ATO Compliance SME

Everforth ECS is seeking a Security/ATO Compliance SME in Arlington, VA (hybrid).

Everforth ECS is seeking talented professionals to join our growing team supporting the Cybersecurity and Infrastructure Security Agency's (CISA) Technical Engineering and Support Services (TESS) program. TESS is CISA's integrated, capability-driven mission ecosystem designed to scale across mission and delivery spaces within the DHS/CISA/Cybersecurity Division/Capacity Building program. This is a hybrid role.

• →Specific responsibilities include but are not limited to:
• →Providing security technical expertise and management of security analysts, security engineers, processes and procedures across the Data Services Program
• →Providing excellent leadership and applying their in-depth knowledge to lead and support the security architecture, implementation, deployment, and operations of the Data Services solution to achieve and maintain a DHS Authority to Operate (ATO) of the Data Services solution
• →Provide team building and facilitate growth, development of security engineers, and cross team collaboration and knowledge transfer for the new Data Services Solution
• →Evaluating the security of the Data Services solution to satisfy DHS security controls and program requirements as well as prevent attacks, damage, and unauthorized access

Salary Range: $140,000 - $160,000

General Description of Benefits

• →US citizenship and ability to acquire Public Trust Suitability 
• →8+ years of experience supporting system accreditation within the Federal Government
• →Bachelor’s Degree or equivalent additional experience
• →In depth experience supporting Authority to Operate (ATO) processes and creating artifacts, control implementation details, incident management, vulnerability management, contingency planning and managing POA&Ms
• →In depth experience with National Institute of Standards and Technology (NIST) security controls, Cyber Security Assessment and Management (CSAM) Assessment and Authorization tool or equivalent, Risk Management Framework (RMF), and Federal Information Security Management Act (FISMA)
• →Experience with Vulnerability Management, SEIMs, Auditing Tools, and other Security Tools