Job SummarySFRC is seeking an experienced Cybersecurity Specialist Lead to support the Launch and Test Range Systems (LTRS) in support of the U.S. Space Force. This is a role for a technical and cybersecurity expert who will drive innovation and lead technical efforts enhance and strengthen cybersecurity for the Spaceport of the Future.
This role requires a blend of strategic vision and hands-on expertise to navigate the complexities of legacy system virtualization, DoD cybersecurity compliance, and process automation.
The successful candidate will be participating with teams for implementing innovation, and integrating security controls into LTRS systems, adhering to Risk Management Framework (RMF) standards.
Key Responsibilities:- Take direction, and at times lead executing the policies and processes established to improve and advance SFRC and cybersecurity
- Serve as a lead cybersecurity professional. Provide risk and security control assessment Subject Matter Expertise (SME) support to SFRC departments and work centers as required.
- Lead, and independently complete authenticated scans via Nessus, SCAP Compliance Checker, and others. Conduct IP packet captures, review and access IP traffic, and populate Ports, Protocols, and Services Management (PPSM) documentation. Analyzing network device configuration files, access control lists, and apply appropriate Security Technical Implementation Guide (STIG) settings, and record and report settings in a STIG checklist
- Analyze the cybersecurity architecture of Range systems for compliance with DoD policies; develop and execute security test plans; and use security tools such as ACAS/Nessus, SCAP, and execution of STIGs
- Create, review, and ensure FISMA packages and LTRS Authorities to Operate (ATO) packages are submitted on time or ahead of schedule
- Perform and occasionally lead DoD Assessment & Authorization (A&A) activities, including assessing the cybersecurity risk of Range systems documenting them in formal risk assessments and supporting artifacts associated with the A&A process
- Conduct Information Systems vulnerability assessment, risk mitigation, and Plan of Action and Milestone (POA&M) development and tracking, understanding and application of mitigation strategies.
- Keep up to date with new technologies and capabilities to maintain relevant awareness of cybersecurity and information technology advancements. Mentor/train junior members of the team
- Organize, develop, and present briefings, written summaries, and reports incorporating detailed technical data, risk analyses, and courses of action, appropriately tailored to the receiving audience
- Obtain and maintain a SIPRNet account with continuous access to eMASS, develop broad eMASS expertise, and provide training as needed
- Safeguard and ensure the integrity of company, customer and government data. Support efforts to transition to updated Risk Management Framework versions as necessary.
- Develop, modify, and review documentation, analyze the cybersecurity posture and architecture of Range IT systems for compliance with DoD/DOW and NIST policies.
- Monitor workflow to ensure delivery of products is on time in accordance with requirements.
- Ensure work products are reviewed prior to release to ensure a quality product and consistency with SFRC operating instructions, policies, procedures, and organizational responsibilities.
- Work with the cybersecurity manager to identify and analyze performance metrics and collaborate with team members to formulate service improvement recommendations.
Required Skills & Experience:- Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- 5+ years of experience in information technology, Windows or Linux system administration, networking, or telecommunications
- Experience working with:
- Vulnerability and patch management tools
- Installation, configuration, and modification for various IT systems:
- Firewalls and network appliances
- Application and Operating system software
- Various computer hardware interfaces e.g., serial, IP, SRIO, etc.
- Security architectures e.g., Risk Management Framework, Zero Trust, etc.
- Network hardware operating systems and configurations (Cisco IOS, Juniper JUNOS)
- Strong understanding of DoD Cybersecurity Policies and Procedures
- Ability to conduct Information Systems vulnerability assessment, risk mitigation, and Plan of Action and Milestone (POA&M) development, and tracking, understanding and application of mitigation strategies
- Experience with vulnerability scanning and security settings evaluation software and report functions
- Network and/or System Administration technical expertise with Microsoft operating systems, Linux/Unix operating systems, Cisco products, and VMWare/virtualization.
- Experience with eMASS and the Authority To Operate (ATO) workflow process
- Strong analytical and problem-solving skills for resolving both technical and cybersecurity issues
- Strong interpersonal, communication, and presentation skills for interacting with team members and customers
- Ability to research policies, procedures, standards, and guidance, and appropriately apply technical settings, always with the mindset of keeping the Range, launch ready
- Ability to prepare and execute detailed computer system analysis, including interim and final reports and presentation of analysis data
- Must be able to obtain and maintain a DoD Secret Security Clearance, which includes U.S. citizenship
Additional Eligibility Qualifications:- DoD 8140 foundational and residential qualification withing twelve (6) months of hire start date.
- Ability to travel 20% within Florida
- Ability to push/pull 30 pounds
- Ability to climb up and down stairs
- The flexibility to work occasional non-duty hours or on weekends to support specific project or mission requirements
Salary Range Statement Final compensation is determined through a comprehensive evaluation of several key factors, including the candidate's educational background, specialized technical expertise, and relevant professional experience. We also consider internal equity, prevailing market data, and specific contractual or funding requirements to ensure competitive and equitable offer alignment. 
