Cybersecurity Manager

JCS Solutions LLC; Bethesda (MD); On-site; USD 165,000 - 180,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401k retirement plan with employer match

Annual Professional Development Reimbursement Program

Job summary

JCS Solutions LLC in Bethesda, Maryland seeks a highly skilled Cyber Security Manager. The role involves overseeing IT security operations, maintaining compliance, and enhancing organizations' security posture. Candidates should be well-versed in cybersecurity technologies and have hands-on experience with industry-standard tools.

The ideal candidate will have 4-6 years of experience in IT Security, including incident response and FISMA compliance. Benefits include health insurance, paid time off, and a competitive salary range of $165,000-$180,000.

Qualifications

• 4-6 years of hands-on experience in IT Security management.
• 3+ years of experience with cybersecurity technologies and tools.
• Expertise in vulnerability information dissemination.

Responsibilities

• Oversee vulnerability scanning and compliance activities.
• Maintain and configure logging/auditing tools.
• Lead incident response and handling efforts.

Skills

Cybersecurity technologies

Vulnerability management

Incident response

Data analytics

Education

CISSP, CISA, or CISM certifications

Tools

BigFix

Splunk

Tripwire

Cylance

Tenable

Job description

Job Summary

JCS Solutions is seeking a highly skilled Cyber Security Manager within the IT Security division. The selected candidate will be responsible for operating, maintaining, and enhancing NICHD’s computing environments to ensure secure and reliable delivery of IT services to end users. This role focuses on proactively identifying and mitigating threats and vulnerabilities to maintain a robust security posture.

Key Responsibilities

• Oversee routine vulnerability scanning capabilities across networks and systems.
• Oversee patching, hardening, and baselining activities across networks; ensures stakeholders are in compliance with established policies.
• Maintain, configure, and ensure successful deployment of logging/auditing tools across networks; ensure logging activities are functional across all networks.
• Maintain system baseline and configuration management items, including security event monitoring policies.
• Interact with Systems engineers and O&M personnel to ensure a complete and functioning system that meets requirements.
• Ensure all Network Defense capabilities are kept current, patched, securely configured, and communicate status to management.
• Analyze data flows into, out of, and across networks to ensure security gaps do not exist and data exchange is in line with system classification level.

FISMA Compliance Support

• Research, analyze, and report on trends using publicly available or collected data.
• Ensure effective implementation of annual FISMA reporting review requirements.
• Review security documentation of various NICHD systems to assure FISMA compliance is effectively implemented and monitored.
• Have necessary organization, experience, and technical controls.

What You Will Bring

Cybersecurity

• Four to six years of hands‑on experience providing technology leadership for IT Security.
• Three or more years of experience with new and emerging cybersecurity technologies including hands‑on tool usage of BigFix, Splunk, Tripwire, Cylance, Tenable, etc.
• Knowledge of vulnerability information dissemination sources (alerts, advisories, errata, bulletins).
• Experience with incident response and handling methodologies.
• Knowledge of current industry methods for evaluating, implementing, and disseminating IT security assessment, monitoring, detection, and remediation tools and procedures utilizing standards‑based concepts and capabilities.

FISMA Compliance Support

• Four to six years of hands‑on experience providing technology leadership for FISMA Compliance.
• Three or more years of experience with new and emerging cybersecurity technologies including hands‑on tool usage of BigFix, Splunk, Tripwire, Cylance, Tenable, etc.
• Knowledge of vulnerability information dissemination sources (alerts, advisories, errata, bulletins).
• Experience with Security Assessment and Authorization in Federal environment.
• Knowledge of current industry methods for evaluating, implementing, and disseminating information technology security assessment.

Additional Qualifications

• CISSP, CISA, CISM, and/or SSCP.
• Strong strategic thinking, multi‑tasking, negotiation, conflict management, time management, planning and execution skills.
• Able to communicate complex technical concepts and project information clearly to both technical and non‑technical audiences.
• Ability to work effectively as a member of an integrated team and negotiate reasonable compromises among diverse stakeholders.
• Ability to work in a fast‑paced, technically challenging area; anticipate changes, problems, assess impacts & recommend solutions.
• Ability to work independently and be motivated, capable of working across teams and organizations.
• Prefer experience with data analytics and combining data sets from multiple sources to provide reports for identifying risk and measuring security posture.
• Prefer strong strategic thinking, multi‑tasking, time management, planning and execution skills.
• Expert level experience with Microsoft Word, PowerPoint, Excel, and Visio.
• Prior experience using a helpdesk ticketing system such as ServiceNow is preferred.
• Prior federal government IT Security experience is preferred.

Benefits

• Health, dental, and vision insurance.
• Life insurance.
• Short‑term and long‑term disability.
• Paid time off (PTO).
• 401k retirement plan with employer match.
• Annual Professional Development Reimbursement Program.

Compensation

General salary range: $165,000.00 - $180,000.00

Commitment to Non‑Discrimination

All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.