Information System Security Specialist

Data Intelligence (DI) is looking for a qualified candidate for our Information System Security Specialist position in Virginia Beach, VA (NSWCDD) area.

• Long-term project working as a member of the large-scale Cybersecurity Engineering team
• Perform STIGs for Linux, Windows systems, remediate vulnerabilities
• Conduct vulnerability scans (ACAS) and audits

• Remediate vulnerabilities in Linux, Windows systems
• Lead technical planning and systems engineering to ensure cyber compliance and security posture with respect to availability, integrity, authentication, confidentiality, and non-repudiation of critical system information.
• Assure that CS/cyber engineering attributes are achieved through the cost-effective, risk-balanced application of controls in a manner that promotes confidentiality, integrity, availability, non-repudiation, and authentication of information.
• Perform security reviews, identify gaps in security architecture, and develop security risk management plans.
• Assist in the design, development, and security of platform and CEs by mapping requirements to architecture, documenting system policies and plans, and in generating platform baselines from a functional perspective.
• Provide services to include support for lifecycle A&A, robust risk assessment and management strategies, and a security patch management process.

• 5 or more years of experience performing RMF activities
• Experience developing Plans of Actions and Milestones (POA&M) entries.
• Experience in completing Risk Management Framework 5 Step authorizations in an ISSE capacity.
• Demonstrated experience providing and communicating risk reduction recommendations to stakeholders.
• Demonstrated experience with performing STIG assessments to include using SCAP benchmarks.
• Expertise configuring, running ACAS/Nessus, other vulnerability scans
• Experience with Navy/DoD systems
• Experience with eMASS.
• U.S. Citizenship required, ability to acquire and retain a DoD security clearance
• IAT 2 or greater certification (Secuirty+, CISSP, Certified Ethical Hacker (CEH))
• At least secret level security clearance