Job Description

Description:

This position will support all Enterprise initiatives to include Certification and Accreditation (C&A) support for DoD systems, cyber vulnerability assessments, penetration testing, and security technical implementation guide (STIG) compliance testing. Candidate will also be responsible for performing risk analysis and assessments, providing fix actions or mitigation rationale, and developing get well plans. Selected candidates will reside in Orlando, FL, or Bethesda, MD. Anticipated travel for this position is estimated between 25 – 50% of the time.

Basic Qualifications:

- Demonstrated broad background/skillset in cybersecurity tools, cyber hunting concepts, techniques, and issues across a broad range of technologies including Kali Linux and Splunk
- Understanding of vulnerability scanning tools, advanced persistent threat (APT) and blue/red team methodologies
- Experience with CyRIS, IT Administrative Tools (VMWare), Governance and Risk Analysis and Splunk
- Experience in system hardening, analysis, configuring physical or virtual servers, and vulnerability management
- Understanding of technical issues while supporting program managers, engineers, or stakeholders
- Experience with evaluating products/environments then provide an effective solution that aligns with LM policy or STIGs
- Background in creating Risk Management Framework (RMF) and Information Assurance Vulnerability Management (IAVM) kits
- Understanding of NIST Frameworks (800-53 and 800-171)
- Demonstrated experience conducting technical security testing and assessments (e.g., vulnerability discovery, network & systems integrity activities - searching for possible unauthorized behavior/signs of compromise using technical tools and manual evaluation)
- Demonstrate excellent verbal and written communication skills
- Must posses strong interpersonal relations and analytical skills

Desired Skills:

- Ability to produce an expert review of accurate and timely technical reports for release to internal and/or external customers
- Cybersecurity engineering experience including security administration, firewall rule management, patch management, system center operations manager, and threat modeling
- Ability to serve as central coordination point or SME on cybersecurity, system administration related topics and thinking like an attacker
- Must have the ability to discuss common cybersecurity regulations and provide documentation in support of special projects
- Availability to perform or support site assessments
- Experience in performing Active and Passive Reconnaissance techniques for potential exploitation
- Experience in configuring NetApps and reviewing snapshots/snap mirroring
- Bachelor of Science Degree in Computer Science, Cybersecurity/Info Assurance, or Computer Engineering and at least 9 years of related experience
- Cybersecurity Industry Certifications such as Security+, CEH or CISSP
- Recognized AWS or Azure cloud certification
- Currently hold DoD Secret Clearance with ability to obtain a Top-Secret Clearance