Job Type

Full-time

Description

Roles and Responsibilities:

Essential:

JCIP Technical Reviewers play a pivotal role in evaluating the cybersecurity posture of enterprise environments across the Intelligence Community (IC). Conduct thorough technical assessments of UNIX-based systems (e.g., Solaris, AIX, Linux variants) for compliance with Intelligence Community Directives (ICDs), Security Technical Implementation Guides (STIGs), Security Requirement Guides (SRGs), and NIST 800-53 Rev 5 and 800-171 controls.

Other:

• Perform manual audits of UNIX configurations, user access controls, file system permissions, patch management, and security logging.
• Analyze vulnerabilities related to UNIX systems and recommend mitigation strategies aligned with JCIP and IC security policies.
• Interpret and apply complex STIG requirements specific to UNIX environments.
• Collaborate with system administrators, security teams, and leadership to present findings and provide actionable security recommendations.
• Lead and mentor Level 1 UNIX inspectors, providing guidance on technical evaluations and inspection reporting.
• Stay updated on emerging UNIX threats, patches, and best practices for system hardening.
• Participate in inspection planning, execution, and reporting.
• Travel as required to support onsite inspections. (8-12 weeks of travel avg, some international and passport required).
• The primary day-to-day seat is at Tysons Corner.

Knowledge, Skills, and Abilities:

Knowledge:

• Deep understanding of UNIX operating systems including Solaris, AIX, and major Linux distributions (Red Hat, CentOS, Ubuntu).
• Expertise in system hardening, patch management, user and group management, file permissions, and security auditing.
• Proficient in interpreting UNIX-specific STIGs and aligning findings with NIST 800-53/800-171 controls.
• Familiarity with shell scripting for automation of audit and remediation tasks.

Skills:

• Strong hands-on experience performing manual UNIX system security audits.
• Ability to analyze system logs, identify anomalies, and assess system security posture.
• Effective verbal and written communication skills for technical briefings and reporting.
• Leadership and mentoring capabilities for guiding junior inspectors.

Abilities:

• Independently lead UNIX inspections with minimal supervision.
• Provide expert recommendations for system configuration and architecture improvements.
• Manage inspection schedules and deliverables effectively.
• Adapt inspection techniques to diverse UNIX environments and organizational policies.

Requirements

Certifications:

Obtain an IAT-III or Maintain IAT Level III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management.

CASP+ CE

CCNP Security

CISA

CISSP (or Associate)

GCED

GCIH

CCSP

Level Certifications Indicative of Qualification:

Level 1- CompTIA Linux+, Red Hat Certified System Administrator (RHCSA), Solaris Certified System Administrator (SCSA)

Level 2 - Red Hat Certified Engineer (RHCE), Linux Professional Institute Certification (LPIC-2), Certified Information Systems Security Professional (CISSP)

Level 3 - Red Hat Certified Architect (RHCA), GIAC Certified UNIX Security Administrator (GCUX), CISSP-ISSAP

Education:

Possess a master's degree, with 8+ years of total experience/equivalent certifications.

Other:

Master's degree may be substituted with a bachelor's degree and 5+ years of additional experience/equivalent certifications, for a total of 13+ years.

Clearance:

Hold a Top Secret Security Clearance with SCI eligibility.

Ability to Pass CI Poly.