Why Join Sierra7?
Sierra7 is a Small Disabled Veteran Owned Business. We were founded in 2009 with the mission of "Serving those who Serve". We recently received the DAV (Disabled American Veteran) award. Also, Sierra7 is ranked No. 457 out of 5,000 fastest growing private companies in America by Inc. Apply today and help us with our mission of "Serving those who Serve".

Benefits:

Medical/Dental/VisionFSA (Flexible Spending Account)HSA (Health Savings Account)Life Insurance, Voluntary Life Insurance, Voluntary Short- and Long-Term DisabilityAdditional Supplemental Medical Benefits
Critical Care, Hospital Indemnity, Legal Plan, Pet Insurance, Accident

401KLegal AssistanceFinancial WellnessPaid Time Off (PTO)Federal HolidaysEducation ReimbursementLinkedIn LearningEmployee Referral Program

About this role:
The Junior Information Security Analyst will provide Assessment and Authorization support and will update and implement a Security Plan. The Junior Information Security Analyst will work with the VA Security Engineer/Information Security Officer (ISO) to conduct vulnerability assessment, and the National Security Operations Center and National Service Desk for Enterprise Security Change Control Board (ESCCB) on tickets and installations.

Position Responsibilities:
Review software application requirements.Validate security elements are identified.Analyze whether software products developed comply with and meet VA security standards.Post all required security artifacts in the approved VA tool.Work with the VA Security Engineering teams to ensure that all requirements for the Authority to Operate (ATO) are completed.Upload security artifacts to the current SPM system.Document and validate security requirements between the system owner and respective Contractors.Provide training on all pertinent security requirements to stakeholders, business sponsors, and PMO and development team members.Provide regularly scheduled status reports that summarize all security-related activity, with emphasis on high-risk activities and potential/actual security breaches and violations, revise the Program Objective and Milestones (POAM) to reflect current security status.Provide status update as required to system owners.