Softthink Solutions

• Develop General Support System SSP • Update Major Application SSPs • Map controls to NIST SP 800-53 • Maintain evidence crosswalks • Support final C&A package assembly • Ensure documentation readiness for evaluation

• Lead risk assessment methodology and residual risk analysis supporting federal authorization decisions. • Develop NIST SP 800-30 Risk Assessments. • Analyze vulnerabilities, likelihood, and impact. • Maintain risk register and mitigation tracking. • Develop residual risk reports. • Support risk acceptance decisions.

• Review interconnection security agreements • Analyze connection boundaries and data flows • Identify missing security responsibilities and risk areas • Provide recommendations for external connection security

• Develop ST&E Plan • Perform technical and non-technical security testing • Conduct vulnerability assessments • Validate security controls implementation • Document findings and recommendations • Support Security Compliance Validation reporting

• Edit and format technical/security deliverables • Maintain document consistency and quality standards • Support Section 508/accessibility compliance checks • Review cross-references, tables, and compliance artifacts • Assist with final package assembly and submission readiness

• Review cloud and infrastructure security architectures • Assess AWS, firewall, virtualization, and endpoint security controls • Support vulnerability analysis and remediation recommendations • Validate security configurations and technical evidence • Provide guidance on network, server, and SaaS security best practices • Support security assessment and testing activities

• Provide technical leadership for Certification & Accreditation (C&A) and Risk Management Framework (RMF) activities supporting system authorization decisions. • Lead RMF strategy and authorization roadmap. • Guide NIST SP 800-37 lifecycle activities. • Identify NIST SP 800-53 security controls. • Validate FIPS 199 and FIPS 200 categorization. • Oversee SSP, Risk Assessment, ST&E, and authorization package development. • Provide interpretation of NIST, FIPS, and federal requirements.

• Serve as primary point of contact for project management • Manage project schedule, deliverables, and milestones • Lead kickoff meetings, status reporting, and review cycles • Track risks, issues, and action items • Coordinate with CO/COR, CISO, and technical teams • Maintain deliverable register and quality control process • Ensure successful project completion within timelines

• Serve as the primary point of contact for end-users, providing technical support for Microsoft Office (Word, Excel, PowerPoint) and other IT systems. • Troubleshoot and resolve issues related to MS Office applications, including formatting problems, data corruption, and functionality errors. • Offer guidance and training to end-users on best practices and advanced features of Microsoft Office tools. • Manage and maintain ticketing systems to track, prioritize, and document user requests and resolutions. • Assist with hardware, software, and basic network troubleshooting as needed. • Collaborate with IT teams to escalate and resolve complex technical issues. • Ensure all support requests are addressed within defined service-level agreements (SLAs). • Create and update technical documentation, FAQs, and user guides specific to MS Office applications. • Stay informed about updates and new features in Microsoft Office to enhance support services.

• Research and identify potential prospects using online tools, databases, and market research. • Generate leads through cold calling, outbound emails, and follow-up campaigns. • Plan, execute, and optimize email marketing campaigns for lead nurturing. • Qualify inbound and outbound leads based on defined criteria. • Maintain accurate records of calls, emails, and lead status in CRM systems. • Schedule meetings or demos for the sales team. • Collaborate with sales and marketing teams to improve outreach strategies. • Meet or exceed weekly and monthly lead generation targets.