Security Certification Assessor Tester Evaluator (SCATE) with Security Clearance

Company: LP3
Location: Sterling
Posted on: January 12, 2021

Job Description:

Job Title: SCATE / Principal Penetration Testing EngineerLocations: Chantilly, VAStart: ASAPDescription: This position is an Information Assurance Penetration Test Engineering lead role on a high technology development and operations project protecting national intelligence assets. This role requires broad expertise in penetration testing methodology, tools, and tradecraft adapting on the fly to exploit vulnerabilities discovered. This position includes working with high security posture systems such as Cross Domain Systems and highly sensitive data. You will have an opportunity to shape the penetration testing approaches and processes used on this project. This position is a challenging role in a multi-contractor team supporting multiple fast moving projects. In this role, you will work as a key pentest team member, execute tasks, and support the work of other engineers on the project. This task requires expertise in penetration testing and vulnerability scanning--you need to be the go-to person. This role requires coordination with government security stakeholders, setting up key Technical Exchange Meetings, advocating a testing approach, completing government processes, and negotiating any special security conditions. Establishing a track record of reliability and trust with government security stakeholders is crucial. As part of the LP3 team, occasional consulting on other projects as well as RFI and proposal support are also required. Responsibilities include: --- Conduct penetration testing to demonstrate the security posture of a system --- Scanning systems with a variety of tools and assisting others in remediating vulnerabilities --- Ability to communicate effectively with senior management in government and contractor engineering teams --- Ability to plan, design, and implement solutions supporting mission essential data flow requirements --- Execute dry run security testing with the engineering teams --- Ensure systems comply with key government security requirements and demonstrate that through verification testing with government security stakeholders --- Ability to effectively communicate and advocate key security requirements to the project teams --- Building and deploying Windows and LINUX workstations and servers --- Maintaining Information Assurance Vulnerability Alert (IAVA) and Information Assurance Vulnerability Bulletin (IAVB) compliance --- Test Environment Asset Management --- Maintaining network infrastructure (switches, firewalls, etc.) --- Systematic recap of hardware --- Maintaining software licenses --- Creating and maintaining all Assessment and Authorization (A&A) paperwork for the test environment --- Performing software assurance reviews (source code analysis) Key Skills: The ideal person for this role is a senior penetration testing engineer with strong linux and Windows system administration background, experienced, technically capable with virtual hosts, self-motivated, and can effectively influence others to deliver the right solution for the customer. Creativity, personal backbone, and IT security testing experience are required. A broad range of Information Assurance experience is required to be successful in this position. Required qualifications: --- SCI clearance with current SSBI --- Experience running penetration testing --- Experience running vulnerability scans --- Strong knowledge of ICD 503/NIST 800-53 security requirements --- Windows and LINUX OS background --- Bachelor's degree and 15-years of experience OR master's degree and 10-years of experience in a technical field --- Experience working in a team environment on similar tasks --- IT security training including IAM III Certification (CISSP, CISM, GSLC, etc.) Strongly desired qualifications/skills: --- Windows and LINUX system administration experience --- Cross-domain security architecture and engineering experience --- Experience with virtual systems such as AWS --- Experience with ACAS/Nessus, SCC SCAP, DISA STIGs --- Professional certifications-- technical certifications such as CISSP, RHCE, CCIE, etc. This position is offered by LP3. LP3 is an innovative company delivering a wide variety of consulting expertise to DoD and IC customers. http://www.LP3.com If you are SCI cleared, qualified, and interested in this challenging opportunity please email a detailed technical resume to:--.

Keywords: LP3, Sterling , Security Certification Assessor Tester Evaluator (SCATE) with Security Clearance, Other , Sterling, Virginia