Cyber Security Specialist

1 week ago


Ashburn, United States CACI International Inc Full time
Cyber Security Specialist (ISSO)Job Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: NoneEmployee Type: RegularPercentage of Travel Required: Up to 10%Type of Travel: Local* * *

General Description

What you’ll get to do:

The Cybersecurity Specialist with both strong cybersecurity and network security delivery skills will need to have a deep technical understanding of Cybersecurity practices, delivering secure and reliable hardware and software solutions in short sprints. They will work as an integral part of a highly productive team of seasoned technical professionals who thrive on supporting our customer's mission and growth objectives– responsible for designing, developing, leading, and implementing secure application and infrastructure capabilities for a variety of legacy and modernized systems and applications.

They will work in close collaboration with software developers/engineers, quality assurance engineers, stakeholders, and end users within Agile Engineering processes. They must have a working knowledge of enterprise class information assurance requirements and network security and survivability.

They will also be responsible for supporting development of a spectrum of engineering artifacts that adequately, but succinctly captures system security requirements, application and network security design, and network security architecture. This position is responsible for ensuring that all assigned work activities are performed in a timely, secure, compliant and cost-effective manner while maintaining the highest quality of performance.

What you’ll get to do:

Serve as a Cybersecurity Team member responsible for the Information Assurance and Security of application, database, and enterprise network services. Responsible for activities associated with delivery of Cybersecurity policy implementation and network solutions associated with customer-defined systems and software projects; basic responsibilities include:

Implement Cybersecurity Program strategy Apply information security in accordance with National/DHS/CBP directives security policy including, but not limited to, NIST SP 800-30, NIST 800-37, NIST 800-53a, NIST SP 800-61, NIST 800-171, DHS 4300A, CBP Handbook 1400-05D Assess entire system lifecycle requirements and network security impacts Support creation of, and ensure approval for, Department of Homeland Security (DHS) Risk Management Framework (RMF) Assess and Authorize (A&A) Process for development and sustainment projects Support program and customer management, and government Authorizing Official (AO) for all information security status, policies, and procedures Document DHS RMF Security Implementation Plan artifacts. Coordinate and assist development team with application artifact documentation Assist government personnel in preparing and presenting Information Assurance Compliance System (IACS) packages to the Control Assessor (SCA) Assess and analyze the current threat environment Enhance – Implement Cybersecurity vulnerability/A&A hardening testing Optimize – Cybersecurity development environment certification Architect & Engineer security – develop security goals, capabilities, controls, and architecture Design & Implement security – vulnerability management, build security into development Integrate & Test Security – test patches and settings, document A&A artifacts Validate & Verify security – validate patch status and software control status Implement security – apply patches and security settings, performance incident handling and remediation Maintain security posture – audit security settings, track security training, monitor threats, track reaccreditation Enable assurance for information security during all phases of agile software development and deployment Continuously evaluate and recommend innovative proven best business practices and tools to enhance defense-in-depth Identify, assess, and recommend zero-day cyber threat remediation Address Cybersecurity issues to help maintain Continuity of Operations Plans (COOP) Perform information security vulnerability testing and mitigate any nonconformance Supports reviews and audits of continuous system monitoring and contingency planning. Updates associated documentation as needed Create and manage Plan of Action & Milestones (POA&M) Implement and validate Security Technical Implementation Guide (STIG) requirements for all development and implementation projects Understand and assist developers with static code analysis processes Report and help investigate security-related incidents and security violations as requested by the Computer Security Incident Response Center (CSIRC) Monitor and inspect for approved software usage and implementation of approved antivirus and other security related software Develop and maintain security training programs are developed and maintained

You Will Bring These Qualifications:

Must be a U.S. Citizen with the ability to pass CBP background investigation, criteria will include:3-year check for felony convictions1-year check for illegal drug use1-year check for misconduct such as theft or fraud College degree (B.S., M.S.) in Information Assurance, Computer Science, Information Management Systems or a related discipline or equivalent experience. Certifications: minimum Security+ CE or equivalent, CISSP or CASP preferred Demonstrated knowledge DHS 4300A, “Sensitive Systems Handbook”, and CBP Handbook 1400-05D, “Information Systems Security Policies and Procedures Handbook” Demonstrated knowledge of NIST Information Technology Security Special Publications (SP) 800 series, with emphasis on NIST SP 800-37, “Guide for Applying the Risk Management Framework to Federal Information Systems” and NIST SP 800-53A, “Guide for Assessing the Security Controls in Federal Information Systems” Professional Experience: 7 years related technical experience Working knowledge of and ability to assist others in the use of information security provisioning and monitoring tools to support process improvement Working knowledge of Federal Information Security Management Act (FISMA) reporting requirements and processes Ability to apply advanced principles, theories, and concepts, and contribute to the development of innovative IA principles and ideas Experience working on unusually complicated problems and providing solutions that are highly creative and ingenious, exhibiting ingenuity, creativity, and resourcefulness Experience with continuous integration tools and environments Experience with scripting languages like Perl, VBScript, Ruby, etc. Experience with Computer Network Defense (CND) processes, procedures, and tools Acting independently to expose and resolve problems Demonstrated experience with HP Fortify Software Security Center Demonstrated experience with Assured Compliance Assessment Solution (ACAS)/Tenable Nessus Vulnerability Scanner Demonstrated experience with DISA Security Technical Implementation Guide (STIG) implementation and Security Content Automation Protocol (SCAP) tool usage Demonstrated familiarity and experience with Firewalls, Intrusion Prevention Systems, WebGateways, and/or enterprise Antivirus software technologies Demonstrated experience using IACS Demonstrated ability to identify and manage risk Understanding all elements of the DHS and CBP Cybersecurity policies and requirement Excellent written and verbal communication skills Strong collaboration skills and desire to work within a team Highly responsible, team-oriented individual with very strong communication skills and work ethic; self-starter

What We Can Offer You:

- We’ve been named a Best Place to Work by the Washington Post.

- Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.

- We offer competitive benefits and learning and development opportunities.

- We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities.

- For over 60 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.

 



  • Ashburn, United States Gray Tier Technologies LLC Full time

    Gray Tier Technologies is seeking a Linux Cyber Security Engineer who is a self-starter with good analytical and problem-solving skills, flexibility, good judgment, and the ability to work on concurrent tasks in an effective manner. Will be a member of a multi-disciplined team working in a high pressure, fast paced environment. Responsibilities will include...


  • Ashburn, United States IMPYRIAN Full time

    Job DescriptionJob DescriptionCOMPANY OVERVIEWAt Impyrian, our commitment to excellence, client-centric approach, and deep industry expertise set us apart. We strive to be a trusted partner for organizations seeking to embrace digital transformation, bolster cybersecurity, streamline operations, leverage advanced audio-visual technologies, drive successful...


  • Ashburn, United States IMPYRIAN Full time

    Job DescriptionJob DescriptionCOMPANY OVERVIEWAt Impyrian, our commitment to excellence, client-centric approach, and deep industry expertise set us apart. We strive to be a trusted partner for organizations seeking to embrace digital transformation, bolster cybersecurity, streamline operations, leverage advanced audio-visual technologies, drive successful...


  • Ashburn, United States IMPYRIAN Full time

    **COMPANY OVERVIEW** At Impyrian, our commitment to excellence, client-centric approach, and deep industry expertise set us apart. We strive to be a trusted partner for organizations seeking to embrace digital transformation, bolster cybersecurity, streamline operations, leverage advanced audio-visual technologies, drive successful engineering and...


  • Ashburn, United States Leidos Full time

    **Description** The Leidos Digital Modernization Team is seeking a Data Acquisition Specialist to join the NOSC Cyber Team. The Department of Homeland Security (DHS), Network Operations Security Center (NOSC) Cyber is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to DHS networks through monitoring, intrusion...

  • Cyber Threat Analyst

    3 weeks ago


    Ashburn, United States Gray Tier Technologies LLC Full time

    Primary Responsibilities: Shift schedule: 7pm-7am, Thurs-Sat, every other Wednesday. Utilize state of the art technologies such as Endpoint Detection & Response tools, log analysis (Splunk) and possibly network forensics (full packet capture solution) to perform hunt and investigative activity to examine endpoint and network-based data. Conduct log...


  • Ashburn, United States Leidos Full time

    **Description** Our Security Operations Center (SOC) Support Services is a US Government program responsible to monitor, detect, analyze, mitigate, and respond to cyber threats and adversarial activity on the government Enterprise. We have primary responsibility for monitoring and responding to security events and incidents detected at the Trusted Internet...

  • Cyber Lead Manager

    4 weeks ago


    Ashburn, Virginia, United States Telos Corporation Full time

    Job TitleCyber Lead Manager - ITGJob DescriptionThe most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.Be a part of...

  • Cyber Lead Manager

    1 month ago


    Ashburn, Virginia, United States Telos Corporation Full time

    Job TitleCyber Lead Manager - ITGJob DescriptionThe most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.Be a part of...


  • Ashburn, United States Leidos Full time

    **Description** The Network Operations Security Center (NOSC) Cyber is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to DHS networks through monitoring, intrusion detection and protective security services to DHS information systems including local area networks/wide area networks (LAN/WAN), commercial...


  • Ashburn, United States Base One Technologies Full time

    BS degree in Science, Technology, Engineering, Math or related field and 8 years of prior relevant experience with a focus on cyber security or Masters with 6 years of prior relevant experience. Should have 5 years of experience serving as a digital media Primary Responsibilities Identify gaps in malicious activity detection capabilities Create new...


  • Ashburn, United States L3Harris Technologies Full time

    **Job Title**: Manager, Cyber Intelligence (ISSM) **Job Code**:11802 **Job Location**:Ashburn, VA - The Cyber Intelligence Manager/Information System Security Manager (ISSM) is part of an Information Security team supporting a wide variety of existing and developing computer network, communications systems, and projects. The Manager/ISSM partners with...


  • Ashburn, United States DMI Full time

    About DMI: About the Opportunity: DMI, LLC is seeking a **Computer Security Systems Specialist I** **Duties and Responsibilities**: - Analyze and defines security requirements for Multilevel Security (MLS) issues. Design, develop, engineer, and implement solutions to MLS requirements. - Gather and organize technical information about an organization's...


  • Ashburn, United States DMI Full time

    About DMI: About the Opportunity: DMI, LLC is seeking a **Computer Security Systems Specialist III** **Duties and Responsibilities**: - Design, develop, engineer, and implement solutions to MLS requirements. Perform complex risk analyses which also include risk assessment. - Establish and satisfy information assurance and security requirements based upon...


  • Ashburn, United States CareerBuilder Full time

    BS degree in Science, Technology, Engineering, Math or related field and 8 years of prior relevant experience with a focus on cyber security or Masters with 6 years of prior relevant experience. Should have 5 years of experience serving as a digital media Primary Responsibilities Identify gaps in malicious activity detection capabilities Create new...

  • Cyber Lead Manager

    3 weeks ago


    Ashburn, United States Telos Corporation Full time

    **Job Description**: The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security. Be a part of the Telos culture and see...


  • Ashburn, United States Dhara Consulting Group Full time

    Today - Dept of Homeland Security - Unspecified - Unspecified - IT - Security - Ashburn, VA** (ON-SITE/OFFICE)** - R-00133208 **Description** Department of Homeland Security (DHS) Network Operations Security Center (NOSC) is a US Government program responsible to monitor, detect, analyze, mitigate, and respond to cyber threats and adversarial activity on...


  • Ashburn, United States SAIC Full time

    Job ID: 2407174-3449 **Location**:REMOTE WORK, VA, US **Date Posted**:2024-05-20 **Category**:Cyber **Subcategory**:Cybersecurity Spec **Schedule**:Full-time **Shift**:Day Job **Travel**:No **Minimum Clearance Required**:None **Clearance Level Must Be Able to Obtain**:None **Potential for Remote Work**:No **Description** Help support our...


  • Ashburn, Virginia, United States Base One Technologies Full time

    Our Ashburn VA based client is looking for a Tier 2 IR Night Shift Front. This position requires an active Secret and DHS Public Trust Clearance. If you are interested in this opening, please forward a copy of your updated resume in word format to Must Have One of the Following J3 CertificationsGCIH - Incident HandlerGCFA - Forensic AnalystGCFE - Forensic...


  • Ashburn, United States Leidos Full time

    **Description** The Network Operations Security Center (NOSC) is a U.S. Government program responsible to monitor, detect, analyze, mitigate, and respond to cyber threats and adversarial activity on the enterprise. The NOSC has primary responsibility for monitoring and responding to security events and incidents detected at the Trusted Internet Connection...