Cyber Security Specialist II (Mid-Level)

Job Description

The Cyber Security Specialist II is responsible for protecting, monitoring, and maintaining Information Systems (IS) security across enterprise networks and mission-critical environments supporting Marine Corps Enterprise Network (MCEN) operations. This position ensures the confidentiality, integrity, availability, authentication, and non-repudiation of information systems through the implementation and management of cybersecurity tools, security policies, incident response processes, and defensive cyber operations.


The incumbent will support cybersecurity compliance initiatives, perform continuous monitoring activities, investigate security incidents, maintain security infrastructure, and ensure adherence to Department of Defense (DoD), Marine Corps, and Government cybersecurity requirements.


Essential Duties and Responsibilities


Information Assurance & Security Operations

• Ensure the confidentiality, integrity, availability, authentication, and non-repudiation of information systems and data.


• Implement, maintain, and monitor cybersecurity controls across enterprise networks and communication systems.


• Verify compliance with established security policies, standards, and government regulations.


• Develop, implement, and execute government-approved information security policies, procedures, and plans.

Defensive Cyber Operations

• Identify, analyze, investigate, and respond to cybersecurity incidents.


• Conduct forensic analysis and support remediation activities following cybersecurity events.


• Monitor security alerts and vulnerabilities utilizing automated cybersecurity tools.


• Produce cybersecurity metrics, reports, and operational statistics.

Network Security Management

• Implement and maintain network security measures to protect information systems and infrastructure.


• Operate, manage, and monitor:
  
  
  
  • Host-Based Security System (HBSS)
  
  
  • Firewalls
  
  
  • Intrusion Detection Systems (IDS)
  
  
  • Intrusion Prevention Systems (IPS)
  
  
  • Virtual Private Networks (VPN)
  
  
  • Web and Database Firewalls
  
  
  • Security Information and Event Management (SIEM) platforms
  
  
  • Other security tools and technologies
  
  
  
  

Continuous Monitoring & Compliance

• Ensure workstations and servers remain compliant with Marine Corps cybersecurity requirements.


• Conduct security assessments and support vulnerability management activities.


• Monitor and analyze system and network security events utilizing:
  
  
  
  • McAfee HBSS
  
  
  • Tenable SecurityCenter
  
  
  • RedSeal
  
  
  • McAfee SIEM
  
  
  • Imperva Web Application Firewall (WAF)
  
  
  • Related cybersecurity platforms
  
  
  
  

Incident Response & Recovery

• Support information security incident handling and reporting.


• Participate in incident containment, eradication, recovery, and lessons-learned activities.


• Assist with Continuity of Operations Planning (COOP) and Disaster Recovery (DR) initiatives.


• Support certification, accreditation, and authorization activities for information systems and networks.

Security Infrastructure Administration

• Operate and maintain Public Key Infrastructure (PKI) components.


• Support Electronic Key Management System (EKMS) operations.


• Manage and monitor network intrusion detection and forensic systems.


• Assist with implementation of enterprise security architectures and defensive cybersecurity measures.

Minimum Qualifications


Education

• High School Diploma or equivalent required.

Experience

• Minimum of five (5) years of cybersecurity, information assurance, network security, or related experience.

Certifications

• Current CompTIA Security+ certification required.

Security Clearance

• Active Secret Clearance required.

Preferred Qualifications

• Experience supporting Department of Defense (DoD) or Marine Corps network environments.


• Experience with Risk Management Framework (RMF) processes.


• Knowledge of DoD cybersecurity regulations, directives, and security standards.


• Experience with security incident response and digital forensics.


• Familiarity with enterprise vulnerability management tools and compliance monitoring solutions.

Required Knowledge, Skills, and Abilities

• Strong knowledge of cybersecurity principles, methodologies, and best practices.


• Experience with enterprise security monitoring and threat detection technologies.


• Ability to investigate and analyze cybersecurity incidents.


• Knowledge of intrusion detection and prevention systems.


• Understanding of PKI, encryption technologies, and key management principles.


• Familiarity with vulnerability assessment and remediation processes.


• Strong analytical, problem-solving, and troubleshooting skills.


• Ability to work effectively in a fast-paced, mission-critical environment.


• Strong written and verbal communication skills.

Work Environment

• Primarily office and secure government facility environment.


• May require work in classified environments.


• Participation in after-hours support, incident response, or emergency operations may be required.


• Occasional travel may be required based on mission needs.

The anticipated salary range for this role is $70,000 to $90,000 annually. The anticipated salary range for this position is provided in accordance with applicable pay transparency laws. The final starting salary will be determined based on a variety of job-related factors, including the selected candidate's qualifications, skills, relevant experience, education, certifications, and work location (where applicable), as well as internal equity and market considerations.


We use E-Verify to confirm the identity and employment eligibility of all new hires.