Description
Qualifications
Required Qualifications:
- Bachelors Degree in Information Security, Information Technology, or related discipline, or equivalent experience/combined education, with 10+ years of related professional experience
- Must have and maintain a DoD 8570.01-M (Information Assurance Workforce) IAM level III certification (e.g. GSLC, CISM, CCISO, or CISSP)
- Experience with RMF artifacts, obtaining and maintaining system ATOs, and implementing new and complex technologies at multiple classification levels within large enterprise environmentsExperience performing continuous monitoring and cybersecurity hygiene of a windows domains and network enclaves
- Problem solving and time management capabilities
- Extensive experience working with federal/government agencies in sensitive and classified environments
- Experience with Risk Management Framework (RMF), NIST 800-53, JSIG, and applicable legal and regulatory guidance
- Excellent customer relations and customer support skills
- Experience working in a team-oriented, collaborative environments
- Currently hold an active TS//SCI
- US Citizenship required; successful candidates will be subject to a security investigation and must meet eligibility requirements for access to classified information
Desired Skills:
- At least 3 years experience in the deployment, configuration, and troubleshooting of information technology equipment
- Ability to understand information systems equipment functionality and configurations (switches, routers, IDS, firewalls, servers, storage, etc...)
- Knowledge of virtualized datacenters and VDI
Responsibilities
- Lead a team of Cybersecurity, Network and Systems Engineers and Administrators in the day-to-day cybersecurity and operations of multiple classified systems.
- Manage and mentor personnel.
- Develop and maintain enterprise-wide RMF information security policies, standards, guidelines, procedures, and artifacts following RMF.
- Oversee the development and deployment of the information security program for multiple classified systems to meet business and enterprise requirements, policies, standards, guidelines and procedures.
- Prepare, review, and present technical reports and briefings.
- Create and Maintain the System Security Plans (SSP) and associated documentation.
- Create a book of business for Cybersecurity Team.
- Maintain compliance of accredited information systems based on federal and DoD security standards.
- Manage and performs security compliance continuous monitoring.
- Identify root causes, prioritizes threats and recommends and/or implements corrective action.
- Research and address information security issues as required as an authority on the subject.
- Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices.
- Participate in internal and external security audits and inspections; performs risk assessments.
- Evaluate proposed changes or additions to the information system and assess their security relevance.
- Ensure configuration management (CM) for security-relevant IS software, hardware, and firmware is maintained and documented.
- Conduct investigations of computer security violations and incidents, reporting as necessary.
- Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered.
- Communicate, implement, and manage a formal Information Security / Information Systems Security Program together with ISSE, CPSO/CSSO, and ISO.
- Lead the design, procurement, build, accreditation, and deployment of complex networks and systems in coordination with the ISSE and ISAs.
- Manage cyber budgets to include hardware, software, and resources.
- Install, configure, test, maintain, monitor, and troubleshoot end-user workstations and related hardware and software.
- Receive and respond to incoming calls and/or e-mails regarding end-user or system problems.
- Interface with third-party support and equipment vendors as needed.
- Up to 20% travel required
Apply on company website