Position Overview
The Security Liaison shall coordinate with and report to the assigned NOAA Information and Cybersecurity program-designated point of contact to implement the required security controls for the compliant operation of satellite and product processing systems.
Specific duties include:
- Serves as liaison between the OSPO IT Security Program and Task Order staff to ensure that IT security systems documentation is kept up to date.
- Ensures that Plans of Action and Milestones artifact collection and delivery to OSPO IT security program on time.
- Ensures that System Controls Assessment (SCA) artifacts and deliverables are provided to the OSPO IT Security Program on time.
- Ensures that all planned TO operations and maintenance IT security activities are included in the Integrated Master Schedule, the Enterprise Configuration Management Tool, and other management plans and tools as needed.
- Oversee IT security continuous monitoring and maintains situational awareness of activities including Incident Response, Systems and Network Monitoring, Systems Auditing and Logging, Vulnerability Assessment. Oversees Contingency Planning, Flaw Remediation, Malicious Code Protection, and Maintaining Intrusion Protection/Detection Signatures.
- Works with the Human Resource/Training Coordinator and the Task Order Leads to ensure that all staff understand and comply with requirements for role based, and annual training.
- Oversee Continuous Monitoring and Assessment & Authorization schedules, activities, and deliverables.
- Ensures that System Interconnection Agreements are up to date, accurate, and complete.
Required Skills
- 8+ years' experience applying IT security principles, processes, and tools
- Project management skills, including schedule and cost management
- Detailed expert working knowledge of IT security principles and Federal IT policies, procedures, and guidelines under Federal Information Security Management Act (FISMA) and NIST IT security publications.
- Experience in managing IT security systems, controls, and procedures; IT asset management, vulnerability/patch/configuration management for Federal missions.
- Experience with IT security assessments, audits, plans of action and mitigation.
- Experience in implementing IT security technologies including vulnerability scanners, anti-malware solutions, log management systems, patch management systems.
- Demonstrated written and oral communications skills, including ability to communicate effectively with customer and contractor senior management.
- Experience in managing and working in collaboration with IT specialists in annual System Test and Evaluation (A&A testing), and Plans of Action and Milestones (POA&Ms).
- Experience using Tenable Nessus, IBM BigFix, McAfee antivirus, Mandiant FireEye, ArcSight, Tripwire.
- Experience in systems (Windows server and Linux) and network administration.
- Experience in system engineering, architecture, and design.
- Experience using Cyber Security Assessment and Management (CSAM).
- Experience in implementing Department of Commerce and NOAA IT security policies.
- Knowledge and experience with cloud services like Amazon Web Services, Google Cloud, or Microsoft Azure. Experience transitioning federal environmental software applications and data to cloud services.
- Experience with Microsoft Project, Jira, Big Picture, Big Gantt, Taleo, IBM ClearCase / ClearQuest (ECMT).
- Expert level skill with Microsoft Word, Adobe Acrobat, Microsoft Excel.
- Must be a US Citizen or Permanent Resident and be able to pass a background investigation to obtain a security badge to enter the applicable government facility.
Education
BS/BA in engineering, computer science, related discipline, or equivalent.
Current IT Security certification, CISSP or equivalent
Location
This position supports work at NOAA's Suitland, MD facility with some telework permitted.
Compensation
The salary range for this role is $122,000 - 276,000/year. This range is a good faith estimate based on similar roles across the organization. ERT considers several factors when extending an offer of employment, including the location, scope, and associated responsibilities of the specific position, as well as a candidate’s work experience, education/training, and key skills.
Benefits
All full-time employees are eligible to participate in our flexible benefits package, which includes:
- Medical, Rx, Dental, and Vision Insurance
- 401(k) retirement plan with company-matching
- 11 Paid Federal Government Holidays
- Paid Time Off (PTO)
- Basic Life & Supplemental Life
- Health Savings Account, Flexible Spending and Dependent Care Flexible Spending Accounts
- Short-Term & Long-Term Disability
- Employee assistance program (EAP)
- Tuition Reimbursement, Personal Development & Learning Opportunities
- Skills Development & Certifications
- Professional Membership Reimbursement
- Employee Referral Program
- Competitive compensation plan
- Discretionary variable incentive bonuses based on factors such as individual performance, business unit performance, and/or the company’s performance
- Publication and Conference Presentation Awards with bonuses
