Classified Cyber Security Sr - E3
Posted Updated
Description
Standard Job Description
Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).
Basic Qualifications
- Ability to obtain and maintain a Secret clearance
- Bachelor's degree in Cybersecurity (or related discipline) from an accredited college with related professional experience, or Master's degree in Cybersecurity
- DoD 8570/8140 IAT Level II baseline certification (CCNA-Security, CySA+ **, GICSP, GSEC, Security+ CE, CND, SSCP)
- Experience with developing, reviewing, and maintaining RMF artifacts
- Experience with classified information system auditing and investigations
Desired Skills
- Pevious experience supporting classified information systems
- Knowledge of system accreditation requirements and NIST 800-53 (DAAG/JSIG) RMF implementation
- Experience implementing/validating STIG application, system hardening, analysis, and vulnerability management
- Knowledge of other security disciplines and how they impact and interact with information system security
- Demonstrated technical experience in Windows, Linux operating systems and command line use
- Demonstrated technical experience with industry standard Information Assurance tools (Splunk, Nessus/Tenable/ACAS, STIGViewer/SCAP Compliance Checker/eSTIG, McAfee ePO, McAfee DLP)
- Understanding of network concepts and Type 1 encryption devices, such as TACLANE and boundary protection devices/firewalls
- Experience implementing new and complex technologies at multiple classification levels within large environments and at an Enterprise level
- Experience with scripting languages
- Ability to perform technical assessments for systems being presented to the government for authorization
- Ability to manage multiple projects in dynamic, demanding environments