Job Requirements
Springfield, VA
Top Secret/SCI Full Scope Polygraph
Career Level not specified
Salary not specified
Join Premium to unlock estimated salaries
Job Description
What You Will Be Doing:
- Acting as the representative of the Information System Security Manager (ISSM), ensuring compliance with DoD and Intelligence Community (IC) information security policies, procedures, and directives.
- Supporting efforts to operate, maintain, and dispose of information system materials in accordance with RMF, NIST, ICD 503, and applicable security directives, policies, and System Security Plans (SSPs).
- Implementing and maintaining Security Technical Implementation Guides (STIGs) across Windows, Linux (RHEL), network, virtualization, and cloud environments to ensure compliance with DoD security requirements.
- Executing technical remediation activities to address security findings identified through ACAS, STIG reviews, vulnerability scans, and security assessments.
- Managing assigned Plan of Action and Milestones (POA&Ms) by implementing technical solutions, validating remediation efforts, documenting completion evidence, and supporting POA&M closure.
- Supporting RMF continuous monitoring activities by implementing required security controls, maintaining A&A documentation, and ensuring compliance with NIST SP 800-53 and ICD 503 requirements.
- Generating and implementing required cybersecurity awareness training, ensuring users understand their security responsibilities prior to system access.
- Initiating protective and corrective measures when security incidents, vulnerabilities, or compliance issues are identified.
- Ensuring IA hardware, software, and operating systems comply with approved security configuration guides and organizational security baselines.
- Implementing and enforcing IA policies and procedures as defined by RMF authorization packages and A&A documentation.
- Working on multiple projects simultaneously in a dynamic, fast-paced, team-oriented environment.
- Performing Operations & Sustainment (O&S) functions for enterprise network security infrastructure, including firewalls, web gateways, mail gateways, IDS/IPS, load balancers, performance monitoring tools, and management systems.
- Performing maintenance, hardening, patching, and advanced configuration of security infrastructure to protect enterprise networks from emerging cyber threats.
- Supporting and securing Cloud Infrastructure, including AWS-based technologies.
- Utilizing enterprise security tools such as ACAS, HBSS, Carbon Black, Tanium, RedSeal, and related cybersecurity platforms.
- Conducting forensic network traffic and log analysis to investigate incidents, isolate issues, and respond to analyst alerts.
- Responding to escalated cybersecurity and infrastructure troubleshooting requests.
- Maintaining and administering network infrastructure standards, documentation, and fault-tolerant configurations.
- Presenting monitoring, testing, compliance, and remediation results and reports as required.
- Performing and supporting integration testing, security validation, and operational readiness activities.
- Developing automation and scripting solutions using PowerShell, Bash, Python, or similar languages to improve security operations and compliance.
- Collaborating with systems, network, and cloud engineering teams to implement secure architectures and operational best practices.
- Participating in special projects as required.
group id: 90901937