Security Solution Application Support

POSITION: Security Solution Application Support

LOCATION: O'Fallon, Illinois, Scott Air Force Base

REQUIRED SECURITY CLEARANCE: Secret

POSITION TYPE/STANDARD WORK HOURS: Full-time 40 hours per week

THE OPPORTUNITY:

The United States Transportation Command (USTRANSCOM) located at Scott Air Force Base (AFB), IL, is one of 11 Unified Combatant Commands (UCC). USTRANSCOM provides command and control (C2) for the synchronized transportation, distribution, and sustainment of personnel and assets, making possible the projection and maintenance of national power wherever needed with speed and agility, high efficiency, and a high level of trust and accuracy.

USTRANSCOM operates the Common Computing Environment (CCE) surrounded by a network defense infrastructure. The USTRANSCOM CCE, supported by TCJ6 and USTRANSCOM Component Commands, is comprised of several operating systems on clients and servers, both physical and virtual. The diversity of applications riding on the USTRANSCOM CCE (C2 systems, information management systems, mail/message systems, and security systems) increases the complexity and difficulty to integrate new system requirements. The information security infrastructure operating with the USTRANSCOM CCE is a unique integration of products demanding a high degree of technical skills and understanding.

The Security Solution Application Support position will perform administration, integration, tuning, and optimization of cybersecurity defense tool suite applications supporting network and host host-based defense capabilities. This position will support the integration of USTRANSCOM cybersecurity defense tool suites with capabilities provided via the JIE/ Joint Regional Security Stacks (JRSS), DoD Enterprise services and capabilities, and other products that may be directed or procured. This position will also protect and defend USTRANSCOM's NIPRNet and SIPRNet enclaves, including cloud and on-premises environments, through the application of cybersecurity defense tools and processes.

WHO WE ARE:

BTAS is a woman-owned small business founded in 1995, located near Wright-Patterson Air Force Base in Beavercreek, OH. We have earned national and regional awards in the Department of Defense for our proven IT, Engineering, and Program Management capabilities.

We are committed to working with exceptional quality and professionalism to deliver excellence to our customers, while providing our employees with a stimulating and satisfying work environment as we collaborate with teammates to achieve common goals.

PRIMARY RESPONSIBILITIES:

Perform administration, integration, tuning, and optimization of cybersecurity defense tool suite applications supporting network and host host-based defense capabilities.

• Support the integration of USTRANSCOM cybersecurity defense tool suites with capabilities provided via the JIE/ Joint Regional Security Stacks (JRSS), DoD Enterprise services and capabilities, and other products that may be directed or procured.
• Protect and defend USTRANSCOM's NIPRNet and SIPRNet enclaves, including cloud and on-premises environments, through the application of the cybersecurity defense tools and processes.
• Provide on-site support at locations other than Scott AFB on an as needed basis and as directed by the Government.

CSSP Security Solution Administration Support:

• Support CSSP security solutions, processes, and procedures IAW DoD policy and USTRANSCOM Government direction.
• Provide cybersecurity solution support, to include installation, configuration, operation, and system administration of the Government-furnished cybersecurity solution tool suites.
• Provide support on-site at Scott AFB from 0730 to 1630 local time, Monday through Friday, during schedule maintenance periods, and on-call after duty hours with a one (1) hour response time to begin work.
• The cybersecurity solution tool suites consist of network and host host-based defense capabilities, including anti-malware, HBSS/ESS, network intrusion detection system (NIDS), EDR, SIEM, Endpoint Security and Systems Management Solution (e.g., Tanium), Automated Adversary Emulation Platform, and other products that may be directed or procured.
• Through the application of the cybersecurity defense tools and processes, the contractor shall protect and defend USTRANSCOM's NIPRNet and SIPRNet enclaves including USTRANSCOM's cloud environment.

CSSP Solution Installation Support:

• Perform installation of cybersecurity solution tools IAW USTRANSCOM processes (e.g., change management and RMF).
• This includes requesting/coordinating hardware/software procurement (including lifecycle upgrades); performing project management using government provided requirements management tools and schedules; building and configuring systems to be IAVM and STIG compliant; performing functional testing; developing system assessment and authorization documentation, requesting security evaluations and remediating findings; ensuring performance optimization; verifying requisite content and overall visibility is achieved; and performing operational deployment.

CSSP Security Solution Daily Operations and Maintenance:

Perform day-to-day operation and maintenance of cybersecurity defense tool suites IAW USTRANSCOM Configuration and Change management processes.

• Maintain the existing configuration and integrity of the cybersecurity defense tool suites IAW applicable DOD, USCYBERCOM, JFHQ DODIN, DISA, and USTRANSCOM policies and instructions.
• Perform application support, including troubleshooting, maintenance, updates, testing, customer support, incident resolution, software configuration management IAW USTRANSCOM policies and procedures, implement/enforce whitelisting capabilities, compliance management to differing requirements (DISA, USTRANSCOM, CYBERCOM, etc.), and software problem diagnosis and resolution.
• Create security assessment and authorization documentation, and support system security compliance, remediation, and validation activities (e.g., remediate vulnerability and configuration compliance scan findings; create and submit POA&Ms).
• Utilize the USTRANSCOM tool suites and capabilities to install software or firmware patches and upgrades and ensure application and operating system versions are current and up to date on security vulnerability patches.
• Operate and maintain a service assurance capability for cybersecurity defense service tools.

Maintain, and enhance where necessary, the security posture of USTRANSCOM's network environment.

• Provide risk-based recommendations to the government related to change requests for cybersecurity defense configurations (e.g., HBSS/ESS rule exemptions, HBSS/ESS rogue system coverage resolution, Tanium content packs, EDR Agent updates).
• Ensure cybersecurity defense tools are configured IAW USCYBERCOM, JFHQ DODIN and USTRANSCOM guidance (e.g., HBSS/ESS rule exemptions; Tanium content packs; EDR Agent updates; anti-malware software, engines, and signatures).
• Troubleshoot user and program related issues associated with cybersecurity defense tools and provide recommendations to the government for resolution.
• Provide compliance data to the government in response to USCYBERCOM/JFHQ DODIN orders; develop and update POA&Ms.
• Submit requests for exemption to policy/direction that cannot be complied with IAW prescribed DoD policy/instruction.
• Ensure changes impacting Ports, Protocols, and Services Management (PPSM) are properly documented IAW USTRANSCOM Configuration and Change management and RMF processes.

MINIMUM QUALIFICATIONS:

• 5+ years of experience with Cybersecurity Technology
• IAT Level II certification, such as CompTIA Security+ (ce), CySA+, etc.
• CSSP-IR certification, such as CompTIA PenTest, EC-Council Certified Ethical Hacker (CEH), etc.
• Tanium/Crowdstrike or other security tool administration experience

SUPERVISORY RESPONSIBILITIES:

This position does not supervise others.

WORK ENVIRONMENT:

This job operates in a professional office environment. This role routinely uses standard office equipment.

PHYSICAL DEMANDS:

Must be able to operate a computer and other standard office equipment. Must be able to remain in a stationary position, 80%.

TRAVEL:

Minimal travel, 5 - 10%.

OTHER DUTIES:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and/or activities may change at any time with or without notice.

COMPENSATION:

BTAS adheres to federal, state, and local regulations. This is a Full-Time, Salary, Exempt position. Salary is subject to a variety of factors, including but not limited to years of experience, education, certification(s), training, specialized skills, responsibilities, etc. This position will be eligible for participation in the BTAS Business Development Bonus Program

BTAS BENEFITS:

A comprehensive benefits program, including paid time off, federal holidays, health coverage, 401K plan with generous company match is offered to all full-time employees. Part-time employees may have access to limited benefits.

AAP / EEO STATEMENT:
BTAS is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

BTAS is an E-Verify program participant.