Job Type
Full-time, Contract
Description
The Defense Commissary Agency (DeCA) operates under the operational direction of Joint Force Headquarters-Department of Defense Information Network (JFHQ-DoDIN) and United States Cyber Command (USCYBERCOM) to defend and sustain the Department of Defense Information Network as a Tier-1 DoDIN Area of Operations (DAO). DeCA upholds rigorous compliance standards, including the Federal Information Security Modernization Act (FISMA), Payment Card Industry Data Security Standard (PCI-DSS), and the NIST Risk Management Framework (RMF).
- The Information Security Analyst (Journeyman) is part of a dedicated technical remediation team supporting the Desktop Common Operating Environment (DCOE). In this role, you will receive scan findings and government-directed POA&M work orders, analyze technical requirements, and coordinate directly with desktop and systems administrators to implement fixes, remediate non-compliant STIG configurations, resolve IAVMs, and deliver verification artifacts back to government stakeholders.
Requirements
Primary Responsibilities:
- Vulnerability Ingestion & Triage: Review and analyze vulnerability scan reports (ACAS/Tenable) and compliance exports provided by government scanning personnel; prioritize actions based on severity (CAT I/II/III, CVSS, and IAVM timelines).
- POA&M Work Order Execution: Receive, review, and execute technical work orders and corrective taskings tied to government-established Plans of Action and Milestones (POA&Ms); implement the necessary technical fixes to resolve underlying weaknesses.
- Hands-on Technical Remediation: Collaborate with Desktop Common Operating Environment (DCOE) administrators and systems engineers to remediate vulnerabilities through patch deployment, registry adjustments, Group Policy (GPO) configuration, and operating system baselines.
- STIG Remediation & Hardening: Review DISA Security Technical Implementation Guide (STIG) and SCAP compliance findings; implement technical controls on Windows endpoints and document remediation actions or technical hurdles.
- Remediation Artifact Collection: Gather, format, and provide technical artifacts, test results, and objective evidence to government personnel (ISSM/ISSO) to support government validation and closure of POA&M items.
Secondary Responsibilities:
- Pre-Scan Validation & Coordination: Conduct local verification to confirm that patches, GPO modifications, and hardening scripts applied properly prior to requesting government re-scans.
- IAVM Tracking & Work Order Alignment: Track Information Assurance Vulnerability Management (IAVM) notices against assigned remediation work orders, ensuring timely implementation within required operational windows.
- Ticket Management & Work Order Tracking: Maintain accurate, up-to-date documentation on remediation activities and status updates inside enterprise ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti).
- Endpoint Protection Support: Coordinate with endpoint administrators to ensure McAfee/Trellix Endpoint Security Solutions (ESS/HBSS) agents are healthy and updated on target endpoints throughout remediation cycles.
Required Knowledge & Skills:- Ability to read, interpret, and prioritize vulnerability scan reports generated by ACAS (Tenable Nessus) and SCAP/SCC tools.
- Experience executing remediation work orders and tracking remediation tasks tied to government POA&Ms.
- Practical technical experience remediating cybersecurity findings in a Windows enterprise computing environment (e.g., GPO modifications, registry updates, script execution, and patch verification).
- Strong working knowledge of DISA STIGs, SRGs, and associated checklist formats (.ckl).
- Familiarity with DoD cybersecurity concepts, the DoD IAVM program, vulnerability categorization (CAT I, II, III), and CVSS scoring.
- Experience compiling objective remediation evidence and artifacts (e.g., command outputs, screenshots, configuration logs) for government validation.
- Working knowledge of enterprise ITSM/ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti) to track work orders and milestones.
- Basic understanding of Public Key Infrastructure (PKI) and endpoint protection tools (ESS/HBSS).
- Strong written and verbal communication skills for effective coordination with system administrators, engineering teams, and government leads.
Qualifications:- Education & Experience: Bachelor's degree plusFive (5) yearsof relevant experience.
- DoD 8140 Foundational Certification (Required): Active certification (CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+).
- Computing Environment Training (Required or obtainable post-hire):
- Training in ACAS/EMASS.
- ITIL v4 Foundation certification (preferred / obtainable post-hire).
Clearance Requirement: Active DoD Secret clearance (or ability to obtain and maintain an interim Secret clearance prior to start).
