Cybersecurity Administrator

QED Systems Inc; Virginia Beach (VA); On-site; USD 55,000 - 76,000; Full time

Benefits offered by this job

Competitive benefits package

Employee Assistance Program

Job summary

Q.E.D. Systems Inc seeks a Cybersecurity Administrator to implement and maintain security controls for CMMC Level 2, aligned with NIST SP 800-171 across the enterprise. You will help sustain CUI protection, maintain SSP/POA&M, and support assessment readiness with DOD-related authorities.

Responsibilities include boundary defense, cloud security, vulnerability scanning, patch compliance, and risk assessments; prior DoD/FedRAMP exposure is a plus.

Qualifications

• Experience implementing controls to meet NIST SP 800-171 requirements.
• Experience designing and maintaining a System Security Plan (SSP).
• Experience performing security audits with and without SIEM tools.
• Experience certifying or validating compliance of information systems.
• Current certification compatible with IAT Level III (DoD 8140) or ability to obtain within 6 months.

Responsibilities

• Plan, develop, implement, test, and document security controls to meet NIST SP 800-171 requirements.
• Develop and enforce information security policy.
• Perform IT risk and security assessments and support risk mitigation.
• Assess DFARS flow-down to subcontractors and support vendor risk reviews.
• Develop, update, and maintain SSP and risk analyses.
• Oversee and provide technical guidance to Cybersecurity Analysts.

Skills

NIST SP 800-171

SSP development

Vulnerability management

DLP policies

Cloud security

SIEM tools

CMMC Level 2

DoD 8140 / IAT III

Education

Bachelor’s degree in CS/IT/related field

Master’s degree in related field (optional)

Tools

MS Purview

Data Loss Prevention (DLP) tools

Job description

Career Opportunities with QED Systems Inc

A great place to work.

Share with friends or Subscribe!

Are you ready for new challenges and new opportunities?

Join our team!

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Category

Information Technology/Systems

Job Status

Full Time

Salary Range

$40 - $55/hr

Job Description

The Cybersecurity Administrator is responsible for implementing and maintaining the security controls required for CMMC (Cybersecurity Maturity Model Certification) Level 2 across the enterprise, in accordance with NIST SP 800-171, Protecting Controlled Unclassified Information. The administrator will maintain and improve the organization’s System Security Plan (SSP) and Plan of Action and Milestones (POA&M), support assessment readiness with the company’s C3PAO and DIBCAC, and help sustain the security of Controlled Unclassified Information (CUI).

The Cybersecurity Administrator shall have experience with boundary defense techniques, commercial off-the-shelf (COTS) security products, and cloud services used to meet the enterprise’s system security objectives.

Duties and Responsibilities

• Plan, develop, implement, test, and document security controls to meet CMMC Level 2 (NIST SP 800-171) requirements
• Develop and enforce information security policy
• Perform IT risk and security assessments and support risk mitigation efforts
• Assess flow-down of DFARS requirements to subcontractors and support vendor/supply-chain risk reviews
• Develop approaches to mitigate vulnerabilities and recommend changes to systems or components as needed
• Facilitate an IT business continuity plan
• Perform internal security control assessments and self-assessments, including SPRS scoring support
• Identify information protection needs for the computing and network environments
• Develop, maintain, and analyze the System Security Plan (SSP) and associated cybersecurity risk analysis
• Advise network, system, and software engineers on the results of cybersecurity risk analysis
• Execute and support network security initiatives
• Conduct vulnerability scanning
• Ensure patch compliance
• Support incident response and remediation efforts
• Participate in assessment activities, including interviews, documentation requests, and artifact requests
• Review responses and deliverables for accuracy and assist with interpreting assessment requests
• Review assessment findings and assist management in developing responses and remediation plans
• Create, track, and provide status updates on Plan of Action and Milestones (POA&M) items
• Develop, update, and maintain metric/KPI status reports on a defined schedule for IT initiatives
• Respond to requests for clarification and information
• Oversee and provide technical guidance to Cybersecurity Analysts

Job Requirements / Skillsets

• Experience implementing controls to meet NIST SP 800-171 requirements
• Experience designing and maintaining a System Security Plan (SSP)
• Experience performing security audits with and without specialized SIEM tools
• Experience certifying or validating compliance of information systems
• Current certification compatible with IAT Level III in accordance with DoD 8140 (formerly DoD 8570.01-M), or the ability to obtain one within six months of hire
• Comprehensive understanding of computer security and the ability to communicate clearly and succinctly in written and oral presentations
• Working knowledge of a vulnerability management system
• Experience utilizing MS Purview and Data Loss Prevention (DLP) policies
• Experience securing cloud-based security controls

Job Preferences

• Current ISC2 CISSP certification
• Experience developing and testing an Incident Response Plan
• Experience with network administration
• Experience with system administration
• Experience implementing or managing FedRAMP-authorized vendor products (e.g., GCC High)
• Experience in a classified environment

Education

Bachelor’s degree in computer science, Information Technology, Computer Information Systems, or a related field and 5 years of experience in the field or a related area; or a Master’s degree in a related field and 2 years of experience in the field or a related area. Active industry cybersecurity certifications (ISC2, CompTIA, Cisco, Microsoft) may substitute for some years of experience depending on the certification.

Security Clearance

Requires U.S. citizenship and the ability to obtain a DoD Secret clearance.

Q.E.D. offers competitive benefits such as: Paid Leave, Medical, Dental, Vision, Short/Long-Term Disability, 401(k) retirement plan, Basic Life Insurance, supplemental insurance, and an Employee Assistance Program.