Job Description:Dynamo Technologies, LLC is seeking a Cybersecurity Engineer to support the Defense Logistics Agency (DLA) Technology Foundation Services (TFS) Vulnerability Management Program. The selected candidate will provide vulnerability management, remediation, compliance monitoring, patch management, and cybersecurity engineering support across enterprise systems operating in on-premises, cloud, DISA-hosted, DMZ, NIPRNet, and SIPRNet environments.
Duties/ Responsibilities - Provide vulnerability management support services across supported enterprise platforms.
- Perform technical reviews and analyses of IT system designs, documentation, configurations, risk assessments, and security evaluations.
- Identify vulnerabilities and ensure accurate, complete, and timely POA&Ms are developed.
- Track corrective actions and risk mitigation activities through resolution.
- Conduct security evaluations, scans, audits, and compliance reviews.
- Coordinate DLA CERT notices, taskings, bulletins, advisories, and hotlists.
- Provide enterprise vulnerability management situational awareness and compliance tracking.
- Support USCYBERCOM directives, CTOs, FRAGOs, IAVAs, and INFOCON requirements.
- Assist with Security Test and Evaluation (ST&E) activities.
- Develop vulnerability management plans, patch management plans, and supporting reports.
- Monitor enterprise assets utilizing approved management tools.
- Perform vulnerability remediation utilizing approved remote administration and management tools.
- Coordinate deployment of patches, software packages, and software upgrades.
- Develop, modify, debug, and maintain remediation scripts.
- Monitor deployment status and coordinate alternate remediation methods when necessary.
- Support endpoint management and software deployment activities.
- Provide technical support to DLA Computer Incident Response activities through the Vulnerability Management Team.
- Support implementation of DISA STIG requirements and approved vulnerability scanning processes.
- Develop Technical Advice Memorandums, Interpretation and Clarification Reports, and Residual Risk Narratives.
- Provide weekly status reporting of vulnerabilities, remediation efforts, and patch compliance activities.
Required Skills/Abilities- Experience supporting vulnerability management programs.
- Knowledge of cybersecurity compliance requirements and risk management principles.
- Experience conducting security scans, audits, and assessments.
- Knowledge of patch management processes and remediation methodologies.
- Experience developing and maintaining POA&Ms.
- Experience with vulnerability remediation and enterprise endpoint management.
- Experience with scripting and automation for remediation activities.
- Knowledge of DISA STIGs and vulnerability scanning tools.
- Strong analytical, technical writing, and reporting skills.
Nice to Have Skills- Experience supporting DLA cybersecurity environments.
- Experience supporting cloud-hosted environments.
- Experience supporting NIPRNet and SIPRNet systems.
- Experience supporting enterprise vulnerability management programs within DoD.
- Experience with remote administration tools and automated remediation technologies.
Education and Experience:- Minimum seven (7) years of relevant Cyber Security IT experience.
- DoD 8570 / 8140 Baseline Certification.
- Security+, CISSP, CySA+, CASP+
Travel Requirement:
- Travel may be required in support of vulnerability assessments, audits, meetings, and stakeholder coordination activities.
Clearance Requirement:- Must possess a DoD Secret Clearance and be eligible for an IT-II Non-Critical Sensitive security clearance (Tier 3 (T3)) upon assignment.
