Cyber Auditor with Security Clearance

RealmOne; Fairfax (VA); On-site; USD 90,000 - 150,000; Full time

Job summary

RealmOne is seeking an experienced Cyber Auditor to support a government client. The role focuses on maintaining the security posture of an enterprise IT program and protecting client infrastructure.

The candidate will monitor security tools, perform vulnerability scans, and communicate risks and mitigations to leadership and system owners. A polygraphed security clearance is required, with training provided as needed.

Qualifications

• Experience with vulnerability scanners, report generation, and leadership communication.
• Experience with SIEM, IDS/IPS, HIDS, network mapping, and Linux.
• Must have (or complete within 90 days) one of the following certifications: Security+, CEH, GCIA, CISSP or similar.
• Total 7 years of work experience with active Security Clearance and polygraph.

Responsibilities

• Monitor security tools, assess threats and risks for client infrastructure.
• Provide vulnerability scans, reports, and metrics to management.
• Follow SOPs for detecting and reporting incidents with SOC team.

Skills

Vulnerability scans

Security communications

SIEM technologies

IDS/IPS

HIDS

Linux

Job description

RealmOne was built on the principle that people matter first and foremost. We believe in providing a strong work/life balance by investing in our employees and encouraging professional and personal growth. We do this by offering exceptional benefits, flexible schedules, and the tools necessary to achieve success through paid training, mentoring, and the opportunity to work alongside top-notch industry professionals. We are looking for skilled individuals to provide technical expertise in support of a government client.

We are seeking an experienced Cyber Auditor to join our technology-based program supporting a key government customer. As a Cyber Auditor, you will play a critical role in maintaining the operational security posture for an enterprise IT program.

The Cyber Auditor shall possess the following capabilities: * Monitors security tools, assesses threats, and risks involving client infrastructure.

• Provides vulnerability scans, reports, and metrics to Security, Program, and Customer management.
• Helps determine current risks, provides mitigations strategies, and communicates with system owners, data owners, and security management to ensure risks are appropriately identified and mitigated within operational schedules.
• Follows standard operating procedures for detecting, classifying, and reporting incidents under the supervision of the SOC Manager and in partnership with Tier 3 SOC Analysts.

Qualifications

• * Experience in vulnerability scanners, report generation, and effective communication with leadership is required.
• * Experience in technical writing, using Security and Incident Event Management (SIEM) technologies, Intrusion Detection/Prevention Systems (IDS/IPS), host-based intrusion detection systems (HIDS), network mapping, and Linux is preferred.
• * Must have (or complete within 90 days of hire) one of the following certifications: Security+, CEH, GCIA, CISSP or similar.
• * Candidate must have a total of 7 years of work experience. The experience can be a combination of degree and work history. This can be a High School degree and 7 years of work history OR an Associate's and 5 years, a Bachelors' and 5 years, a master's and 1 years or a PhD and 0 years of work history. Position requires active Security Clearance with appropriate Polygraph