This is a Hybrid Remote and On-site position (MUST BE LOCAL TO ALEXANDRIA- VA, DC, MD area).

PRISM is seeking an HBSS Administrator responsible for system operations and maintenance (O&M) and the security of the enterprise servers. In this role, you will develop TTP that addresses how the organization will ensure HBSS is fully operational by providing all implemented patches, maintenance releases, version upgrades, and implemented tuning are integrated into the program baseline after release and update the HBSS agents, modules, signature files, and policy sets within 30 days of release/approval.

Other Duties:

• Ensure Rogue System Detection sensors have coverage.
• Identify and report any implementation, configuration, resource, and coverage gaps regarding the deployment and operation of HBSS.
• Operates HBSS on all assets following approved operating procedures. This includes monitoring HBSS operations and alert logs, notifying their chain of command by local incident handling procedures, and updating HBSS agents with appropriately supported HBSS policy set changes, programmatic updates, and patches.
• Ensure all assets are monitored by HBSS, and coordinate with local support to install the HBSS agent if unable to install remotely.
• Serves as a first-level escalation point for HBSS-related tickets/issues
• Works to identify the root cause of HBSS-related incidents and provide a workaround, if applicable, to restore service
• Escalates to the appropriate office in cases where current tier troubleshooting has been exhausted.
• Assists with troubleshooting all escalated issues
• Provide feedback to engineering on HBSS documentation and process improvements.
• Remediate all systems with missing or out-of-compliance modules and antivirus and HIPS definitions.
• Remediate Distributed Repository replication failures.
• Setup and verify CutterCopy Solution is functioning correctly on each Cutter.
• Process all Writeable Media Waiver Requests for SIPR
• Adds IP addresses to Trusted Networks for any vulnerability scanners in use by IAD.
• Implements appropriate blocking actions.
• Respond to and resolve incident tickets for HBSS issues
• Provide after-hour support and on-call support as required.

To qualify, you must meet these basic qualifications:

• BA or equivalent 3 yrs related experience, or MA 1 yr related experience
• HBSS 201 and HBSS 301 DISA Certification (or able to obtain within the first month of being on the job)
• Active SECRET
• 3 years of HBSS Admin experience
• CompTIA Security CE