IT Analyst: Cybersecurity and Compliance (3 years)

SDV International is building a small, cross-trained team to support the Federal Aviation Administration’s NISC Enterprise Support Tasking (NEST). The team will operate and maintain the system the FAA uses to manage task orders, funding, and invoices for one of its largest technical support contracts, and will help design and build its replacement. As our cybersecurity and compliance analyst, you will keep the system authorized to operate and build security into the replacement from the start.

Scope of Work

You will be the team’s main point of contact with the FAA’s cybersecurity organization for the NISC Information Management System (NIMS) and the legacy CMIS system. Your work will include:

• Maintaining the security authorization documentation, including the System Characterization Document, System Security Plan, and contingency plan.
• Tracking and closing Plans of Action and Milestones (POA&Ms).
• Answering security data calls on deadline.
• Coordinating vulnerability scans and threat detection, and working with the developer and DBA to remediate findings.
• Running application code security scans before each release.
• Supporting integration of the FAA’s PIV/MyAccess authentication into NIMS and CMIS.
• Reviewing new FAA IT and security policies and recommending how the system should comply.
• Leading security planning and authorization activities for the replacement system (NISC V).
• Providing backup support for cloud administration.

What You Will Do

• Fix defects and build enhancements to an existing ColdFusion application across development, test, and production environments.
• Find and fix performance problems, such as slow pages and queries, and show the improvement with before-and-after measurements.
• Plan and carry out ColdFusion version upgrades.
• Build reports and dashboards for financial and program data.
• Follow secure coding practices and resolve findings from code security scans.
• Help select the technology for the replacement system and lead its development.
• Review teammates’ code and provide backup support for database work., SDV INTERNATIONAL is an essential business. The health and safety of our team members is our highest priority, so we are taking a science driven approach to slowly welcome and transition some of our workforce back to the office with many safety protocols in place. This may include periodic site visits for teleworkers. We continue to monitor and assess before we confirm the return of each wave, paying specific attention to geography-specific trends.

• 3+ years developing production Adobe ColdFusion (CFML) applications.
• Solid SQL skills, preferably with Oracle.
• Experience troubleshooting web application performance.
• Familiarity with version control (Git or similar) and testing practices.
• Must be able to obtain an FAA suitability determination and a PIV card.
• U.S. citizenship Required.

Nice to Have

• Experience upgrading ColdFusion versions or migrating a ColdFusion application to Java, .NET, or another framework.
• Experience with Oracle PL/SQL, AWS, or Section 508 accessible web development.
• Prior federal government or financial systems experience.
• Adobe ColdFusion certification., * Federal cybersecurity or information assurance: 3 years (Required)
• Supporting a system ATO under NIST SP 800-53: 3 years (Required)
• SSPs: 3 years (Required)
• POA&Ms: 3 years (Required)
• FAA or Department of Transportation security programs: 1 year (Preferred)
• SAST or DAST: 1 year (Preferred)
• AWS or FedRAMP cloud security: 1 year (Preferred)
• Contingency planning documentation: 1 year (Preferred)

License/Certification:

• CompTIA Security Plus or equivalent (Required)

We offer competitive pay, full health benefits, 401K Employer Matching, Holiday, Paid Time Off and more., * 401(k)

• 401(k) matching
• Dental insurance
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Retirement plan
• Tuition reimbursement
• Vision insurance

Application Question(s):

• Do you live within the Greater DC Metro area?
• This position is contingent upon contract award. Are you open to a position with that contingency?
• Are you a US Citizen and able to obtain an FAA suitability determination and a PIV card, which requires a background investigation?