Millicent Forkuo Email & Phone Number

Halethorpe, Md, Us

United States

Perform Security Assessments on assigned systems using the Risk Management Framework (RMF) guidelines.• Create technical documentation for working SOPs to help develop security solutions and requirements.• Perform RMF assessment by selecting baseline controls, tailoring, implementing the controls and providing reasonable testing results in line with system-level continuous monitoring strategy• Work with ISSO and ISO to develop and update Security authorization packages; system security plan (SSP), plan of action and milestones (POA&M) or remediation plans in response to reported security vulnerabilities during risk assessments, audits, and inspections, and annual FISMA security reviews for System records that require Assess only or Assessment and Authorization (A&A) process for completeness and compliance with NIST guidelines.• Review vulnerability scans and risk assessments by analyzing the ACAS scan results to provide guidance for mitigation and system hardening and create patch sets for remediation of key security findings• Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network.• Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).• Support the implementation of the information technology (IT) security controls, security authorization documents, and participates in system audits.• Conduct IT risk assessment to identify system threats, vulnerabilities, and risk, and generate reports.• Apply appropriate information security control for Federal Information System based on NIST 800-37 rev1, SP 800-53.• Support A&A activities (Categorize, Selection, Implement, Assessment, Authorize, Monitor) according to the A&A project plan.