Edgewater Federal Solutions is a privately held government contracting firm located near Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater is ISO 9001, 20000-1, 27001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies for 2018, 2019, and 2020.

Edgewater Federal Solutions is currently seeking a Security Management Specialist to provide support to Edgewater Federal government contracts.

• 8+ years of experience with IT System and Application review, information assurance or cybersecurity
• 3+ years of experience with performing system or risk assessments in accordance with, NIST 800-53 / Risk Management Framework (RMF)
• Researches, organizes, writes, edits, trains and produces technical data, guidelines, templates, and policy to support Security Engineering.
• Guide users to formulating security requirements, advise on viability of alternative approaches and conduct and evaluate feasibility studies.
• Perform information security risk assessments across a variety of platforms and applications submitted through the Change Management process.
• Propose remediation/mitigating controls and recommendations to stakeholders and management to minimize risk.
• Address security concerns or issues with proposed software and hardware projects to ensure “baked-in” security considerations in project proposals.
• Lead security team engagements to build and mature processes to produce written Standard Operating Procedures with a focus on improvement to FERC’s Information Assurance processes, methodologies and communication methods.
• Perform daily tasks that include daily health checks and maintenance of servers, privileged account management and running status reports for privileged password and sessions management.
• Support iterative review of security assessment results, and work with stakeholders across organizations to provide structure around risk management and internal controls.
• Experience with CIS Benchmarks and DISA Stigs to provide system hardening guidance.
• Maintain a Master Library of Security Benchmarks for relevant systems as a reference for essential baseline security requirements, compliance and continuous monitoring capabilities.
• Provide status updates and follow-up on active open Security Engineering tickets.
• Align with and support the execution of the Cybersecurity Information Assurance organization vision and strategy.
• Manage, deploy, and maintain security controls.
• Development of security guidance, policies, and procedures.
• Ability to obtain a Public Trust clearance.

• Information Security-related certification Security+ (CISSP desired).
• Bachelor’s degree or equivalent work experience in related field.
• Sound cyber security knowledge foundation, to include understanding of Computer and network technology fundamentals.
• Strong familiarity with NIST Frameworks (NIST 800-53).
• Experience with engineering and management of security tools in an enterprise environment to include installation, configuration, usage, and troubleshooting.
• Demonstrate security expertise with multiple Windows, Mac OS, Unix-based operating systems.
• Excellent verbal and written communication skills and ability to build strong relationships with stakeholders at all levels.
• Strong problem-solving capabilities and the ability to effectively communicate solutions.
• Strong analytical capabilities.

• 
  Understanding of protocols, network topologies, and perimeter security devices (proxies, IPS, IDS, Firewall, and packet analyzers), and network security design.
• Experience with government contracting firms supporting the Federal government.
• Experience with Cloud providers preferably Azure.
• Scripting experience (Bash, Python, Perl, etc).
• Familiar with using agile tools for day to day tasking preferably Azure Dev Ops.