Cyber Security Specialist

We are seeking a Cyber Security Specialist to join our ranks.  This work is both high profile and highly complex, so we are looking for problem-solvers that are able to work quickly to provide innovative solutions. The tight deadlines mean that this person must also be flexible enough to jump in when and where needed. Here are some additional specs for the position.  If you think you’re the person we’re looking for, please get in touch. We’re excited to learn more about you.

Responsibilities

• Conduct risk analyses from vulnerability, compliance scans, or other audit requirements.
• Coordinate/lead along with the Government CS lead and the Program of Record (PoR) PM assigned Authority to Operate (ATO) efforts and make recommendations to improve the processes.
• Support security testing and analysis of Information Management/Information Technology (IM/IT) capability requests (applications, systems, networking devices) being introduced to the Navy Enterprise
• Support the performance of security testing and evaluation of applications against applicable security criteria using common tools, including ACAS (Assured Compliance Assessment Solution), SCAP (Security Content Automation Protocol) Compliance Checker, and DISA (Defense Information (STIGs)
• Produce security testing reports, including Security Risk Assessment Reports detailing the findings noted during testing.
• Assist with finalizing security documentation.
• Support the local ISSM with reviewing and completion of Navy System Access Authorization Requests (SAAR-N)
• Ability to coordinate and work well with others in a lab environment.

Minimum 6 years experience
CompTIA Security
Ability to obtain a Secret Clearance
Bachelors degree in related field

• Experience with US Federal Government security policies
• Experience with ACAS/STIG vulnerability scanning and assessment tools necessary to identify and document compliance.
• Experience identifying, assessing, and documenting compliance against applicable DoD Information Assurance security controls.
• Experience with reviewing, comprehending and documenting findings from ACAS (Assured Compliance Assessment Solution) Reports Experience with SCAP (Security Content Automation Protocol)
• Develop and implement software patches
• Prioritize multiple tasks and complete projects with minimum supervision.
• Ability to work independently or as a team.
• Experience with DoD Architecture Framework (DoDAF) standards and assessments of enterprise information security architecture, processes, procedures, activities, and operations
• Experience with performing cyber security risk assessments and identifying, verifying, and consolidating specific vulnerabilities, causes, analysis of alternatives and identification of appropriate corrective actions from each risk assessment conducted.
• Experience with evaluation of Security Technical Implementation Guides (STIGs) to determine applicability to systems and assets.