OVERVIEW:
Work with the DoD client to discover their cyber risks, understand applicable policies, and develop mitigation plans. Receive technical, environmental, and personnel details from SMEs to assess the DoD client threat landscape. Build trusted relationships with clients and offer expert opinions to help them solve problems. Work in a consultative role to ensure the client operates securely as they navigate an evolving IT environment. Develop solutions and take an active role in information security while growing skills in information technology and cloud computing.
REQUIRED QUALIFICATIONS:
- 8+ years of experience in cybersecurity
- Experience with DoD Risk Management Framework (RMF) and Authority to Operate (ATO) processes
- Experience with codify processes and procedures and collaborating with other teams to determine gaps
- Experience with Vulnerability Management tools, including Nessus, ACAS, HBSS, or Fortify
- Experience with cybersecurity threats, attacks, and vulnerabilities
- Knowledge of the U.S. military and DoD IT environments
- Knowledge of Windows or Linux systems
- Bachelor’s degree
- DoD 8570 IAT Level II Certification
- Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information
DESIRED QUALIFICATIONS:
- Experience with applying abstract security requirements, including NIST 800-53 controls to information systems
- Experience with System Information and Event Management (SIEM) tools
- Experience in a consulting environment and clearly communicating technical subjects to clients
- Experience with eMASS or XACTA
- Experience with DevSecOps principles and practices
- Knowledge of Vulnerability Management, Configuration Management, and Data Management
- Knowledge of enterprise environments and cloud architecture, including AWS or Azure
- Knowledge of Agile Methodologies
- Master’s degree
- DoD 8570 IAT Level III Certification
CLEARANCE:
