IT Security Specialist (Computer Sys Security Anlyst 4) - 26594

Requisition Number: 26594

Required Travel: 0 - 10%

Employment Type: Full Time/Salaried/Exempt

Anticipated Salary Range: $109,272.00 - $160,000.00

Security Clearance: Ability to Obtain

Level of Experience: Senior

This opportunity resides with Global Security (GS). Mission Technologies' Global Security (GS) group comprises live, virtual, constructive (LVC) solutions; fleet sustainment; nuclear and environmental; and Australia business.

As a trusted partner to our military customers, HII designs, develops and operates the largest LVC enterprise that prepares warfighters for cross-domain battle. With advanced technologies to enable mission readiness, HII understands that preparation requires full coordination-not readiness in piece-parts.

For more than 40 years, the U.S. Navy has entrusted HII to maintain and modernize the vast majority of its fleet. With a holistic approach to life-cycle maritime defense systems-from small watercraft to submarines, surface combatants and aircraft carriers-HII ensures a high state of readiness.

HII supports the Department of Energy's national security mission through the management and operation of its sites, as well as the safe cleanup of legacy waste across the country. HII meets clients' toughest nuclear and environmental challenges.

Meet HII's Mission Technologies Division
Our team of more than 7,000 professionals worldwide delivers all-domain expertise and advanced technologies in service of mission partners across the globe. Mission Technologies is leading the next evolution of national defense - the data evolution - by accelerating a breadth of national security solutions for government and commercial customers. Our capabilities range from C5ISR, AI and Big Data, cyber operations and synthetic training environments to fleet sustainment, environmental remediation and the largest family of unmanned underwater vehicles in every class. Find the role that's right for you. Apply today. We look forward to meeting you.

To learn more about Mission Technologies, click here for a short video: https://vimeo.com/732533072

Job Description

Mission Technologies, a division of HII, is seeking an IT Security Specialist to support the United States Postal Service (USPS) Office of Inspector General (OIG). The IT Security Specialist is responsible for the application security function and for information technology security (Cybersecurity/InfoSec) engineering, and design and serves as a technical expert authority. The OIG's information resources are sensitive assets and are critical in the performance of its mission, therefore information security services help safeguard the information resources entrusted to the OIG. This role can be worked remotely from anywhere in the U.S., however there is preference for a candidate local in the Washington DC metro area to be near the customer site.

Essential Job Responsibilities

• Solve significant problems complicated by interfaces and inter-relationships between and among programs, systems, functions, applications, and numerous critical issues for agency-wide
  information technology solutions, operations, and maintenance supporting the security of agency infrastructure, systems, and information.
• Manages and administers a wide range of security systems and tools:
  • Administers cloud-based security tools such as, Azure Security Center (Sentinel, Log Analytics, Azure WAF, Defender for Identity, Privileged Identity Manager); Microsoft 365
    Security Suite (Defender, Advanced Threat Protection, Cloud Application Security, Protection Portal); Microsoft Security and Compliance Center; Microsoft Endpoint Manager
    (Intune); multi-factor authentication (MFA); web content filtering; and secure document sharing and collaboration solutions.
  • Responsible for primary or alternate management of all IT Security systems including patch management, upgrades, integration engineering, and reporting.
• Executes security related operational activities:
  • Manages security incident detection, response, remediation.
  • Conducts cyber threat and vulnerability analysis and remediation.
  • Develops security metrics and manages reporting and compliance.
  • Serves as Incident Response Team member.
  • Supports operational implementation of FISMA/NIST standards and industry best practices.
  • Operates cloud-based security tools such as, Azure Security Center (Sentinel, Log Analytics, Azure WAF, Defender for Identity, Privileged Identity Manager); Microsoft 365 Security
    Suite (Defender, Advanced Threat Protection, Cloud Application Security, Protection Portal); Microsoft Security and Compliance Center; Microsoft Endpoint Manager (Intune);
    multi-factor authentication (MFA); web content filtering; and secure document sharing and collaboration solutions.
  • Manages IT Security awareness training program in coordination with the Learning Management team, to including developing and delivering IT Security awareness training modules.
  • Manages Password Management system in coordination with Service Desk.
  • Responds to IT Security trouble tickets generated by customers and IT staff. Identifies solutions, works with customer and OCIO team to execute solutions, and manages ticket
    input, updates, and resolution in the OCIO ticketing system to maintain service level agreements.
• Supports Security Operations and Engineering by providing technical solution support and expertise:
  • Identifies security risks and recommends risk mitigation strategies.
  • Reviews new and existing systems to ensure baseline security requirements are met and to recommend security enhancements.
  • Develops security architecture and technical solutions for security products.
  • Collaborates with staff from OCIO and other business components to develop security controls and solutions for complex business systems and applications.
  • Develops and executes project plans to engineer, construct, deploy, and monitor/manage IT Security infrastructure solutions
  • Demonstrates in-depth understanding of security requirements associated with cloud-hosted environments, services, and solutions.
  • Evaluates, recommends, and implements security controls associated with cloud-hosted environments, services, and solutions.
  • Evaluates, recommends, and implements security controls for mobile device solutions.

Minimum Qualifications

• 9 years relevant experience with Bachelors in related field; 7 years relevant experience with Masters in related field; 4 years relevant experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 13 years relevant experience.
• Client requirements: Bachelor's Degree in Cybersecurity/Information Technology Security or related field of study from an accredited college or university with at least 5 years of specialized experience with hands-on skills in performing application security assessments and specialized experience in secure SDLC and source code analysis (manual & tools) on Web-based Applications.
• Must have a current industry certification in one or more of the following (or equivalent):
  • Certified Secure Software Lifecyle Professional (CSSLP), Certified Cloud Security Professional (CCSP), Offensive Security Certified Professional (OSCP), EC-Council Certified Application Security Engineer (CASE), GIAC Certified Web Application Defender (GWEB), Azure Developer Associate
• Must have one of the following Microsoft certifications: Microsoft 365 Certified Security Administrator Associate or Microsoft Certified Azure Security Engineer Associate
• Must have hands-on experience with Static and Dynamic Application Security Testing using tools like HP Fortify, HP WebInspect, HCL Appscan, Snyk, Checkmarx, Synopsys, or Veracode.
• Must have specialized experience in Continuous Integration (CI) and Continuous Deployment (CD) practices.
• Must have specialized experience in manual code review with the ability to identify potential vulnerabilities and best coding practices.
• Must have specialized experience in application vulnerability and security assessments using various tools like Burp Suite Pro, OWASP Zap Proxy, DirBuster, Kali Linux, Metasploit Pro,
  Accunetix, Insight AppSec, GitLab, Coverity, Fortify, or GitHub Enterprise.
• Must have specialized experience in assessing application vulnerabilities and bugs in various applications.
• Must have specialized experience creating security testing pipelines and test plans.
• Must have specialized experience in implementing and deploying an organization-wide Application Security program at the enterprise level to identify, report and remediate security vulnerabilities in development and production environments.
• Must have knowledge of coding languages such as Java, .NET, Python, PHP, C++, C#.
• Must have extensive experience in preparing test Plans, writing test Cases, test Execution and follow up remediation efforts.
• Ability to plan, organize and manage tasks on time with minimal supervision.
• Ability to handle multiple tasks and work independently as well as in a team.

Client Security Requirements:

• Must be able to obtain and maintain a USPS Sensitive Clearance.
• Must be a U.S. Citizen.
• The selected candidate will be subject to a pre-employment background investigation and drug screening per HII and/or client requirements.

Preferred Requirements

• An active Secret security clearance is preferred.
• An advanced degree in Cybersecurity or related field is desired.

HII is more than a job - it's an opportunity to build a new future. We offer competitive benefits such as best-in-class medical, dental and vision plan choices; wellness resources; employee assistance programs; Savings Plan Options (401(k)); financial planning tools, life insurance; employee discounts; paid holidays and paid time off; tuition reimbursement; as well as early childhood and post-secondary education scholarships. Bonus/other non-recurrent compensation is occasionally offered for qualified positions, and if applicable to this role will be addressed by the recruiter at the screening phase of application.

Why HII
We build the world's most powerful, survivable naval ships and defense technology solutions that safeguard our seas, sky, land, space and cyber. Our workforce includes skilled tradespeople; artificial intelligence, machine learning (AI/ML) experts; engineers; technologists; scientists; logistics experts; and business administration professionals.

Recognized as one of America's top large company employers, we are a values and ethics driven organization that puts people's safety and well-being first. Regardless of your role or where you serve, at HII, you'll find a supportive and welcoming environment, competitive benefits, and valuable educational and training programs for continual career growth at every stage of your career.

Together we are working to ensure a future where everyone can be free and thrive.
All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

Do You Need Assistance?
If you need a reasonable accommodation for any part of the employment process, please send an e-mail to buildyourcareer@hii-co.com and let us know the nature of your request and your contact information. Reasonable accommodations are considered on a case-by-case basis. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this email address. Additionally, you may also call 1-844-849-8463 for assistance. Press #3 for HII Mission Technologies.