Cyber Security Specialist - DoD

Working in a team environment alongside other cybersecurity engineers and Risk Management Framework (RMF) analysts you'll be responsible for supporting Information System Security Engineering efforts. General responsibilities include:

• Implementing DoD Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems
• Assisting in the development and verification of documentation necessary to complete the DoD RMF assessment and authorization process
• Conducting ICS/SCADA system inventories following DoD guidance
• Conducting vulnerability scanning and document system vulnerabilities
• Supporting ISO standardization and Quality inspections

• Working on government and/commercial projects implementing cybersecurity requirements in a variety of industrial control systems (e.g., building management, electronic security, fire alarm/mass notification, electrical distribution, power management, etc.).
• Proficiency with ACAS and HBSS and mitigation strategies
• Developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Assessment, mitigation, and closure of network vulnerabilities and vulnerability management.
• eMASS.
• Establishing, managing, and tracking of Plan of Action & Milestones (POA&M).
• Applying STIGs to servers, databases, applications, and other hardware.
• Security Readiness Review (SRR) Tools (scripts and ACAS).
• Ability to identify, maintain, and troubleshoot control network components.
• Excellent understanding of the DoD RMF lifecycle and NIST 800-53 controls implementation.
• Awareness of NIST Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security. and UFC 4-010-06 Unified Facilities Criteria (UFC) Cybersecurity of Facility.
• Familiarity with DoDIN CCRI/CCORI and CYBERCOM TASKORDS
• One of the following Certifications are ideally required: CASP CE, CISSP, CISSP – ISSAP, CISSP – ISSEP, CSSLP, CISA, CISM