The Information Technology Security TRA and C&A Analyst – Level 3 (SecA3) will review project systems and applications during the course of their development and life cycle, providing guidance and expertise to the R&CS 5 project teams as it pertains to meeting the needs of the SA&A process. The SecA3 will support the collection and production of all artefacts necessary to follow the SA&A process to its conclusion.
The SecA3 must complete the following specific tasks which include, but are not limited to the following:

1. 1. 1. Review, analyze, and/or apply Federal IT Security policies, System IT Security Certification & Accreditation processes, IT Security products, safeguards and best practices, and the IT Security risk mitigation strategies;
    2. Plan, coordinate, manage, implement, validate, verify, and develop security required to support all assigned AFCCIS Program of Work initiatives;
    3. Develop Security Assessment and Authorization packages associated with the sustainment, addition, modification, and implementation and deployment of existing, new and modified software and/or hardware as defined in the AFCCIS Program and AFCCIS related capabilities;
    4. Identify threats to, and vulnerabilities of operating systems (such as MS, Unix, Linux, and Novell), and architectures;
    5. Identify personnel, technical, physical, and procedural threats to and vulnerabilities of fielded AFCCIS equipment and configuration;
    6. Conduct Accreditation activities such as: Review of the certification results in the design review documentation by the Accreditation Authority to ensure that the system will operate with an acceptable level of risk and that it will comply with the departmental and system security policies and standards and identify the conditions under which a system is to operate (for approval purposes). This may include the following types of approvals:
      1. Developmental approval by both the Operational and the Accreditation Authorities to proceed to the next stage in an IT system's life cycle development if sensitive information is to be handled by the system during development;
      2. Operational written approval for the implemented IT system to operate and process sensitive information if the risk of operating the system is deemed acceptable, and if the system is in compliance with applicable security policies and standards;
    7. Interim approval - a temporary written approval to process sensitive information under a set of extenuating circumstances where the risk is not yet acceptable, but there is an operational necessity for the system under development; and

1. 1. 1. Develop and deliver IT security training material; and
    2. Other tasks related to the TBIPS IT Security TRA and C&A Analyst category as needed.
2. NON-CORE RESOURCES
  1. Programmer/Software Developer - Level 3 (SD3)

The Programmer/Software Developer – Level 3 (SD3) will analyze the client’s business requirement and transform them into software requirements. The SD3 will write program code, resolve technical problems, analyze software test results and fix related issues, perform testing and debugging and will recommend technical strategies to implement business requirements in software. The SD3 will also conduct

Jobs at Renaud Consulting

Register with Renaud Consulting