Requisition #: 2007Job Title: Cyber Security Specialist - Associate (Cybersecurity)
Location: Fort Huachuca, AZ
Clearance Level: Secret, Must Have Clearance to Start
Required Certification(s): CompTIA Security+ CE, Cloud+, Global Industrial Cyber Security Professional, GIAC Security Essentials, Systems Security Certified Practitioner
Job Description- Responsible for the day to day operations of conducting routine IA Audits on all Information Systems (IS) to ensure the appropriate IA security controls have been applied and maintained
- Evaluate IS for compliance in accordance with Risk Management Framework (RMF) 800-53 Controls and Special Directives
- Assist with the continuous monitoring of RMF packages within eMASS (POA&Ms, Test Results, Risk Assessments, etc.)
- Record and/or prepare artifacts associated with the audit to ensure a repository for all system RMF documentation is kept current
- Provide Certification and Accreditation (C&A) support in the development of security and contingency plans by conducting risk and vulnerability assessments
- Use the 800 Series NIST Special Publications as reference for C&A, system security plans, risk assessment, and other security requirements
- Create, edit, and review organization and team level documentation for clarity and accuracy and assist with development of security related TTPs, SOPs, processes, plans, or diagrams
- Use automated security scanning tools (SCAP, ACAS, Tychon, etc.) to identify potential vulnerabilities
- Analyze and report findings to technical teams and leadership for appropriate tracking and mitigation
- Research RFIs from technical teams regarding DISA STIG checklists, and DOD/Army regulations
- Explain requirements to systems administrators in detail to ensure proper understanding and clarity
- Review proposed courses of action from technical teams and recommend the most secure option while balancing operations and/or mission requirements
- Assist in the identification, tracking and remediation of security risks discovered on information systems
- Prepare and deliver detailed written reports and oral presentations to the Security Manger, Information Assurance Manager and other senior leaders or staff within the organization
- Coordinate with both internal and external entities to improve established processes and procedures; ensuring efficient execution of all analysis, tracking, mitigation and reporting requirements
- Coordinate directly with cross functional teams and management to resolve all compliance issues
- Support and/or lead special projects as required
- Complete other duties as assigned by management
Education and BackgroundBachelor degree, and 4-5 years of experience, or equivalent relevant work experience
CompTIA Security+ CE, Cloud+, Global Industrial Cyber Security Professional, GIAC Security Essentials, Systems Security Certified Practitioner
Years of ExperienceRequired Skills- Active DoD Secret clearance
- Excellent communication and interpersonal skills
- Knowledge of network specific DISA Security Technical Implementation Guides and checklists
- Knowledge of asset scanning
- Experience performing audits within a DoD organization
- Experience with Risk Management Framework (RMF) and vulnerability management
Preferred Skills- Knowledge of Enterprise Mission Assurance Support Service (eMASS)
- Knowledge of Assured Compliance Assessment Solution (ACAS), and Tychon Vulnerability scanning and reporting
- Knowledge of ePolicy Orchestrator (ePO) and Continuous Monitoring and Risk Scoring (CMRS)
Working Conditions- 100% on-site
- Ability to sit, stand, and walk for extended periods of time
- Fine motor skills, with the ability to operate keyboards, phones, and controls
$80,000 - $93,000 a year
