Current jobs related to HBSS Lead - Arlington, Virginia - IMC (Innovative Management Concepts, Inc)


  • Arlington, Virginia, United States Leidos Full time

    Job SummaryWe are seeking a highly skilled Continuous Monitoring Analyst to join our team at Leidos. As a key member of our Cyber Security team, you will be responsible for monitoring and analyzing IT systems to ensure the security posture of our clients.Key ResponsibilitiesMonitor IT systems throughout their life cycle for changes that may impact the...


  • Arlington, Virginia, United States Leidos Full time

    Job SummaryWe are seeking a highly skilled Continuous Monitoring Security Specialist to join our team at Leidos. As a key member of our Cyber Security Task Order, you will be responsible for monitoring and analyzing IT systems to ensure the security posture of our clients.Key ResponsibilitiesMonitor IT systems throughout their life cycle for changes that may...


  • Arlington, Virginia, United States Empower AI Full time

    About the RoleWe are seeking a highly skilled Lead Information Assurance SME to join our team at Empower AI. As a key member of our team, you will provide support to the Defense Information Systems Agency (DISA) Joint Service Provider (JSP) on the Platform Services contract.Key ResponsibilitiesServe as the knowledge expert of all security-related aspects of...


  • Arlington, Virginia, United States Empower AI Full time

    About Empower AIEmpower AI is a leading provider of AI solutions for government agencies. Our mission is to empower government leaders with the tools and expertise needed to transform their workforce and achieve meaningful results.Job SummaryWe are seeking a highly skilled Lead Enterprise AMHS Solutions Expert to join our team. As a key member of our team,...


  • Arlington, Virginia, United States Empower AI Full time

    About the RoleEmpower AI is seeking a highly skilled and experienced Enterprise AMHS Solutions Expert to join our team. As a key member of our team, you will provide technical expertise and support to the Defense Information Systems Agency (DISA) Joint Service Provider (JSP) on the Platform Services contract.Key ResponsibilitiesProvide technical expertise in...


  • Arlington, Virginia, United States MAXIMUS Full time

    Job SummaryMaximus is seeking a highly skilled Security Control Specialist to join our team. As a Security Control Specialist, you will be responsible for conducting comprehensive assessments of security controls to ensure the effectiveness of our systems.Key ResponsibilitiesMonitor and evaluate system compliance with IT security, resilience, and...


  • Arlington, Virginia, United States MAXIMUS Full time

    Job Description**Job Summary:**Maximus is seeking a highly skilled Cybersecurity Specialist to join our team as a Security Control Assessor. As a key member of our team, you will be responsible for conducting comprehensive assessments of security controls to ensure the effectiveness of our systems.Key Responsibilities:Monitor and evaluate system compliance...


  • Arlington, Virginia, United States CNA Corporation Full time

    Information Security Compliance Officer - Security DivisionCNA Corporation is dedicated to fostering a diverse and inclusive workplace that values various backgrounds and perspectives. Our dynamic work environment promotes innovative collaboration at every phase of problem-solving. We seek creative and forward-thinking professionals to support our mission of...

  • Lead AMHS SME

    4 months ago


    Arlington, United States Empower AI Full time

    Overview Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower...


  • Arlington, United States Empower AI Full time

    Lead Information Assurance SME Job ID 2022-6760 Job Locations US-VA-Arlington Category IT: Administrator / Analyst / Architect / Engineer Type Regular Full-Time Overview Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation....


  • Arlington, United States Empower AI Inc. Full time

    Overview: Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI...


  • Arlington, United States iTrust Human Capital Management Full time

    Job DescriptionJob DescriptioniTrust Human Capital Management are seeking experienced Information Systems Security Officer (ISSO) to join our network for upcoming projects. The ideal candidates will have a strong background in Department of Defense (DOD) information security practices and will be responsible for ensuring the confidentiality, integrity, and...


  • Arlington, United States SecuriGence LLC Full time

    Job Title: Information Systems Security Manager (ISSM) Location: Arlington, Virginia Clearance Level: Top Secret Clearance (SCI Eligibility preferred) Summary SecuriGence delivers essential technology services supporting critical national security missions. We seek an Information System Security Manager (ISSM) to lead and strengthen our security posture....


  • Arlington, United States SecuriGence LLC Full time

    Job DescriptionJob DescriptionJob Title: Information Systems Security Manager (ISSM)Location: Arlington, VirginiaClearance Level: Top Secret Clearance (SCI Eligibility preferred) SummarySecuriGence delivers essential technology services supporting critical national security missions. We seek an Information System Security Manager (ISSM) to lead and...

HBSS Lead

3 months ago


Arlington, Virginia, United States IMC (Innovative Management Concepts, Inc) Full time

The HBSS Lead is responsible for all areas of IT cybersecurity and in assisting a government contract in managing the risk of operating a network including the Command Cyber Readiness Inspection (CCRI) 3.0/Cyber Operational Readiness Assessment (CORA) and Certification and Accreditation (C&A)/Assess & Authorize (A&A) support and tracking.

Duties / Responsibilities: This position will include, but is not limited to, the following tasks:

  • Act as the HBSS Lead for the contract managing all HBSS requirements for SIPR and NIPR requirements.
  • Support physical, personnel, facility, information systems, through policies and controls IAW Army Regulations, Department of Defense (DoD) Directives and Instructions.
  • Manage information security risks and report findings to the Government.
  • Maintain IT infrastructure in a manner compliant with Federal Information Security Management Act (FISMA), DoD Risk Management Framework (RMF) and National Institute of Standards and Technology (NIST) guidance.
  • Ensure HBSS Secure Technical Implementation Guidelines (STIG) are maintained on SIPR & NIPR environments.
  • Review Trellix Host Based Security Solution (HBSS), and TYCHON reports for end point security compliance. Remediate identified vulnerabilities as required.
  • Report security compliance to higher level authorities and/or reporting structures.
  • Maintain the HBSS related documentation.
  • Support operational teams, execute HBSS requirements, and provide them with HBSS related documentation support as needed.
  • Support and Validate Access Requests (SAAR) for network access and managed services through Service Operations.
  • Provide consultation on Cybersecurity perspectives for proposed changes, initiatives, and projects.
  • Maintain and draft memorandums for record, policies, SOPs, and other similar documentation for SIPR and NIPR environments.
  • Support Incident Response activities as required.
  • Provide weekly status reports on module deployments on all applicable systems.
  • Support Tier 2 and 3 tickets that may or may not be associated with HBSS, i.e., website whitelisting.

The HBSS Lead will support Certification and Accreditation (C&A) activities including:

  • Utilize SIPR and NIPR eMASS instances to support customer to obtain and maintain an Authority to Operate (ATO).
  • Test the security technical controls for the contract LAN via HBSS.
  • Conduct an internal review and execute all checks and tests in accordance with RMF.
  • Develop and maintain associated artifacts and documentations, i.e., policies, plans, and procedures.

The HBSS Lead will support the Cyber Operational Readiness Assessment (CORA) process including:

  • Ensure compliance with all applicable CORA requirements (e.g. Technical, CND Directives, Contributing Factors, etc.). Report status, findings, and results.
  • Provide support to the CORA assessment team during scheduled and unscheduled inspections.
  • Track CORA findings through POA&Ms and report status during MPSRs.
  • Support post-CORA finding remediation. Assist with the planning, execution, and documentation of CORA finding remediation activities.

Basic Required Qualifications and Skills: Note: These are mandatory items that all candidates must have when making application to IMC for this position. Please ensure that your submission addresses each of these requirement items. Candidates without these required elements will not be considered.

  • At start date, must possess a current Information Assurance Technical (IAT) Level II certification - in ACTIVE status.
    • Security+ CE
    • CySA+ (formerly CSA+)
    • GSEC
    • SSCP
    • CCNA Security
    • GICSP
    • CND
  • Obtain current HBSS Certifications within 30 days of start date.
  • 7+ years cybersecurity experience preferably working directly with the Army.
  • 5+ years knowledge of DoD and Army cybersecurity policy.
  • 5+ years of managing HBSS requirements, i.e., implementation, deployment of endpoint modules, quarantine support, etc.
  • Proven ability to prioritize, self-direct and execute at velocity.
  • Solid communication skills with both technical and non-technical stakeholders.
  • Ability to communicate proficiently (both verbally and in written form) to senior officials and others.
  • Please note that pursuant to a government contract, this specific position requires U.S. Citizenship.
  • All applicants must have a current DoD TOP SECRET clearance day one and prior to entry on duty.

Desired Qualifications and Skills:It is desirable that the candidate has the following additional qualifications:

  • A current ITIL 4 Foundations certification.
  • eMASS certification
  • Experience managing and using the Cyber tools used at the NEC.
  • A relevant educational degree in one of the follow fields: Computer Science, Information Systems, Information Technology, Cyber Security, Statistics, Business Administration, Systems Engineering, Computation Science, Computer Engineering, Electrical Engineering, Data Analytics, Information Technology, Information Security and Assurance, Mathematics, Software Engineering, Systems Engineering, or Telecommunications.



Salary and Benefit Information:

Please see the salary information listed at the beginning of this document, which is not a guarantee of compensation or salary. All salaries will be based on relevant experience, geographic location, and position and/or contractual requirements, which could fall outside of the listed range. For more information about IMCs benefits, please visit our website at

Background Information:
Innovative Management Concepts, Inc. (IMC), a Service-Disabled Veteran-Owned Small Business, provides a broad range of information technology IT services to government and commercial customers by placing a high priority on modernization, enhancing business processes through technology, and creating efficiencies through automation. Since its founding in 1989, IMC has offered solutions and expertise in: IT operations and maintenance, data management, cyber security, systems and network engineering and administration, cloud/hosting services, software development, website services, software quality assurance and testing (including IV&V), and project management. IMC is certified in International Organization for Standardization (ISO) 9001 Quality Management, ISO 27001 Information Technology Security Management, ISO 20000 Information Technology Service Management, and ISO 14001 Environmental Management System. Committed to continuous improvement and information security, IMC has been appraised at level 3 of the CMMI Institutes Capability Maturity Model Integration for both Development and Services and we are CMMC Level 2 (Ver 2.0) compliant. Find out more about IMC at

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.