SAP Cybersecurity Specialist

Who Are We?
Groundswell is a premier technology integrator and solution provider, resolutely committed to solving the most complex challenges facing federal agencies today. Our name, Groundswell, represents our commitment to be an unstoppable, seismic change in government. Ours is a small company culture with big company reach and results. Are you ready to be audacious, be bold and drive change at a rapid pace? Join us, where we'll make a greater impact together.

What You'll do:

We are seeking an SAP Cybersecurity Specialist with experience supporting the Department of Defense to help apply industry best practices and deliver effective business solutions. The candidate will leverage their expertise to analyze and define Multilevel Security issues. Typical areas addressed include Human Resources, Finance, Supply, and operations.

Job Responsibilities

• Analyze and define security requirements for Multilevel Security (MLS) issues.

• Design, develop, engineer, and implement solutions to MLS requirements.

• Gather and organize technical information about an organization's mission goals and needs, existing security products, and ongoing programs in the MLS arena.

• Perform risk analyses which also include risk assessment.

• Work with clients to ensure security solution satisfies the objectives as defined in the security and operational requirements

• Work in multi-disciplined teams to define and design complex processes and procedures for the security maintenance of SAP and related application systems

• Support enhancement requests and resolve reported incidents within defined service level agreements

• Support all Risk Management Framework (RMF) activities to include Ongoing Security Assessments (OSA) such as updating control implementation statements and providing evidence to compliance assessment activities

• Support updating security documentation such as System Security Plan, Contingency Plan, Incident Response Plan, Privacy Impact Assessment, and other similar documents

• Prepare progress reports for internal leadership and for client and monitor project progress

• Mitigate risks, address issues, interface with clients, and keep the leadership informed on project status

• Develop basis of estimates and program schedule for multiple solution alternatives

• Author white papers, root cause analysis, other solution related documentation as needed

• Provide support to the management and perform duties as assign

Required Qualifications

• Must be a U.S. Citizen (no dual status)
• Active DoD Secret security clearance (or higher) required
• Preference given to candidates with current or recent DoD experience
• 1-3 years relevant experience as a business analyst in ERP environment
• 2 years focused specifically on SAP years' experience
• 1 year SAP experience in FI, CO, FM or Supply Management.
• Working knowledge of Information Assurance (IA) concepts such as patch management, multi-factor authentication, host-based security, intrusion detection, security event management and defense-in-depth is required
• Experience with Plan of Actions and Milestones (POAM), Information Assurance Vulnerability Management (IAVM), and compliance reporting for mission systems
• Active DoD 8570 certification required or must obtain prior to onboarding to the program
• At least one Security Certification (in order of preference):
  • Certified Information Systems Security Professional (CISSP)
  • Certified Info Sys Auditor (CISA)/Certified Info Sec Manager (CISM)
  • Certified Ethical Hacker (CEH)
  • Other similar certs may be acceptable on a case-by-case basis
• Experience in agile development implementation, preferably SAFe and/or DevSecOps.
• Bachelor's Degree or equivalent experience
• Must be local to the DC Metro area and willing to be on client site in DC up to 5 days/week

Skills:

Certification:

Why You'll Never Want to Leave:

• Comprehensive medical, dental, and vision plans

• Flexible Spending Account

• 4% 401K Match (immediate vesting)

• Paid Time Off

• Tuition reimbursement, certification programs, and professional development

• Flexible work schedule

• On-site gym and childcare option

The salary range for this role takes into account the wide range of factors that are considered in making compensation decisions, including but not limited to skill sets, experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for any applicable geographic differential associated with the location at which the position may be filled. At Groundswell, it is not typical for an individual to be hired at or near the top of the range for their role, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is:

NOTE:Groundswell does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Groundswell, and Groundswell will not be obligated to pay a placement fee.

Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.

Read a copy of the Company's Non-Discrimination Policy Statement.

Additional Resources:

• EO 13496 Notification of Employee Rights under NLRA

• Know your rights: Workplace Discrimination is Illegal

Disability Accessibility Accommodation: If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact us athr@gswell.comor703-639-1777.