Senior Data Analyst/Assessor Level III with Security Clearance

Overview: The CSIS Senior Data Analyst/Assessor Level III will support Diplomatic Security at the Department of State in the Office of the Chief Technology Officer (CTO). CTO is the primary IT group within the Bureau of Diplomatic Security, providing many web applications and other services used by Federal and local law enforcement officers worldwide. This position is contingent upon contract modification. Primary Responsibilities: * Integrate and test new technology for compliance with IT security standards. * Perform analysis to ensure security controls are consistently implemented throughout system development life cycle and continuous monitoring phase.

Develop, document, and execute plans for monitoring, assessing, and verifying security controls across assigned T Directorate disparate information systems. Document security control implementation statements. * Work with cross functional teams across the Bureau to complete RMF steps 1 through 3, as required for RMF steps 4, 5 and, 6. * Provide recommendations, guidance, and corrective action for all non-compliant security controls. * Execution and knowledge of FISMA tasks that consist of system authorization/reauthorization, and system security categorization required for T Directorate disparate application systems. Conduct comprehensive self-assessments consisting of automated and manual security assessments of the management, operational, and technical security controls employed within or inherited by DS information systems to determine the overall effectiveness of the controls. Enter test results and artifacts into the bureau/department repository. * Support bureau review of assessment activities, reports, and conclusions. Develop and maintain all required Assessment documentation following NIST 800-53 requirement for Steps 1, 2, 3, 4 (remediation of independent assessment findings), 5 (Provide artifacts for Authorization Official Approval/Review Package), 6 (Continuous Monitoring actions) of the Risk Management Framework for all Bureau managed systems. Provide security expertise to ensure security controls are implemented and the resulting documentation and artifacts are current. Implement a NIST-compliant continuous monitoring process across all major information systems to provide periodic assurance to senior management on the security protections of major information systems. Travel to T Directorate disparate system locations in Blackstone, VA, as required. * Project manage all T Directorate disparate systems A&A activities to include updating schedules, milestones, and deliverables to include a risk and issues log. * Ensure SCANS and Audit Logging are being completed and meeting compliance for disparate systems. * Ensure all servers and workstations meet approved CTS configuration guideline requirements for compliance. * Oversee any T Directorate disparate asset retirement. * Complete updates in preparation for the Annual Control Assessments for T Directorate system portfolio each year. * Update all T Directorate systems to Rev 5. * Complete and Manage all Significant Impact Assessments for assigned portfolio. * Ensure the closure of all Plan of Action and Milestones for T Directorate system portfolio. * All other duties assigned.

Education and/or Experience: * A technical B.A. or B.S. degree from an accredited university. * A minimum of six years of experience in performing system and application certifications and accreditations.

Advanced practical experience in managing all phases of systems A&A activities ranging from early concept development to system retirement. Demonstrated experience supporting Government Agencies, preferably DOS. * Demonstrated experience creating system continuous monitoring and contingency plans that identify critical mission and business functions and recovery processes and procedures. * Expert in the processes and documentation requirements for RMF methodologies.

Knowledge, Skills, and Abilities: REQUIRED: * Knowledge of network security architecture concepts, including topology, protocols, components, and principles. * Knowledge of NIST Rev 4 and 5 security controls. * Proficient or able to gain proficiency with a broad array of security software applications and tools.

Organized with attention to detail. Willing to learn. PREFERRED: * Certified Information Systems Security Professional (CISSP) and/or a Certified Information Systems Auditor (CISA) Prior server, networking, or application administrative, engineering or system architect experience. Experience working in a matrix organizational structure. Previous experience using Xacta, Archangel, JIRA, and/or Service Now Some knowledge of SDLC, project manager principles, and ITIL. Knowledge of the FAM and FAH Policies

Security Clearance: SECRET Level Required * Must have a current United States Government SECRET Personnel Security Clearance or be able to successfully complete a U.S. government administered Investigation. * Must be a U.S. Citizen. * Must be able to maintain a U.S. Government SECRET clearance. TOP SECRET Clearance Level Preferred * Must have a current United States Government TOP SECRET Personnel Security Clearance. * Must have a current U.S. Government Single Scope Background Investigation (SSBI)/ Tier 5 or equivalent. * Must be a U.S. Citizen. * Must be able to maintain required Security Clearance/access approvals. Physical Demands: Must be able to physically and medically perform in a normal office environment. While performing the duties of this job, the employee is required to be able to occasionally stand; walk; sit; use hands and/or fingers to handle, or feel objects, tools or controls; operate office equipment, reach with hands and arms; climb stairs; balance; stoop; kneel; talk or hear; taste or smell. The employee must occasionally lift and or move up to 25 pounds. Travel: Local and/or international travel may be required.