Cybersecurity Specialist 2

M.C. Dean; Charleston (SC); On-site; USD 90,000 - 130,000; Full time

Job summary

M.C. Dean is seeking a cybersecurity engineer to coordinate and implement DoD security controls across IT and OT environments. The role involves supporting RMF assessment and authorization processes and conducting ICS/SCADA inventories under DoD guidance.

Ideal candidates have DoD RMF experience, familiarity with NIST 800-53, and strong skills in vulnerability management, STIG application, and customer collaboration.

Qualifications

• Experience with DoD RMF lifecycle and NIST 800-53 controls.
• Proficiency applying STIGs to IT/OT systems and documenting results.
• Experience executing vulnerability management and risk mitigation.

Responsibilities

• Coordinate and implement DoD security controls with team and government customers.
• Assist in DoD RMF assessment and authorization documentation.
• Inventory ICS/SCADA systems following DoD guidance.
• Conduct vulnerability scanning and document system vulnerabilities.
• Support ISO standardization and quality inspections.
• Improve organizational cybersecurity posture continuously.

Skills

DoD RMF lifecycle

NIST 800-53 controls

Cybersecurity

Policy development

Customer communication

Education

Master's Degree in IT/Risk Management/Cybersecurity

Bachelor's Degree in IT/Risk Management/Cybersecurity

Associate's Degree in IT/Risk Management/Cybersecurity

High School Diploma

Tools

ACAS

HBSS

STIGs

eMASS

POA&M tracking tools

SRR Tools

Job description

Overview

About M.C. Dean

M.C. Dean is Building Intelligence. We design, build, operate, and maintain cyber-physical solutions for the nation's most mission-critical facilities, secure environments, complex infrastructure, and global enterprises. With over 7,000 employees, our capabilities span electrical, electronic security, telecommunications, life safety, automation and controls, audiovisual, and IT systems. Headquarters in Tysons, Virginia, M.C. Dean delivers resilient, secure, and innovative power and technology solutions through engineering expertise and smart systems integration.

Why Join Us?

Our people are passionate about engineering innovation that improves lives and drives impactful change. Guided by our core values, agility, expertise, and trust we foster a collaborative and forward-thinking work environment. At M.C. Dean, we are committed to building the next generation of technical leaders in electrical, engineering, and cybersecurity industries.

As part of a multidisciplinary team, you will be responsible for coordinating and implementing technical controls and configuration settings and will work in a team environment alongside other cybersecurity engineers and Risk Management Framework (RMF) analysts responsible for supporting Information System Security Engineering efforts. Must have an active IAT Level II certificate.

Responsibilities

• Working closely and supporting team members, vendors, and government customers
• Implementing DoD Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems
• Assisting in the development and verification of documentation necessary to complete the DoD RMF assessment and authorization process
• Conducting ICS/SCADA system inventories following DoD guidance
• Conducting vulnerability scanning and document system vulnerabilities
• Supporting ISO standardization and Quality inspections
• Participating in continuous improvement of organizational cybersecurity posture

Qualifications

Education:

• 0+ Years of Experience with a Master's Degree in Information Technology, Risk Management, Cybersecurity
• 2+ Years of Experience with a Bachelor's Degree in Information Technology, Risk Management, Cybersecurity
• 6+ Years of Experience with an Associate's Degree in Information Technology, Risk Management, Cybersecurity
• 8+ Years with a High School Diploma

Required Progressive Experience:

• Working with industry and government agencies on the design of platforms and integrated systems
• Working on government and/commercial projects implementing cybersecurity requirements in a variety of industrial control systems (e.g., building management, electronic security, fire alarm/mass notification, electrical distribution, power management, etc.)
• Proficiency with ACAS and HBSS and mitigation strategies
• Developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data
• Assessment, mitigation, and closure of network vulnerabilities and vulnerability management eMASS
• Establishing, managing, and tracking of Plan of Action & Milestones (POA&M)
• Applying STIGs to servers, databases, applications, and other hardware Security Readiness Review (SRR) Tools (scripts and ACAS)
• Ability to identify, maintain, and troubleshoot control network components
• Excellent understanding of the DoD RMF lifecycle and NIST 800-53 controls implementation
• Awareness of NIST Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security and UFC 4-010-06 Unified Facilities Criteria (UFC) Cybersecurity of Facility
• Working knowledge of operational control systems and implementing a variety of security assessment tools
• Working knowledge of other operational control systems
• Familiarity with DoDIN CCRI/CCORI and CYBERCOM TASKORDS Familiarity with various industry products

One of the Required Certifications:

• CASP CE CISSP CISSP - ISSAP CISSP - ISSEP CSSLP CISA CISM GCED GCIH

Also:

• Strong Oral, Written and Presentation Skills with the ability and experience communicating directly with Customers
• Demonstrated background working with multidisciplinary teams
• Demonstrated time management and organization skills to meet deadlines and quality objectives
• Strong MS Excel, Word, PowerPoint, AUTOCAD, Cameo and Visio Skills is a plus.

Abilities:

• Exposure to computer screens for an extended period of time.
• Sitting for extended periods of time.
• Reach by extending hands or arms in any direction.
• Have finger dexterity in order to manipulate objects with fingers rather than whole hands or arms, for example, using a keyboard.
• Listen to and understand information and ideas presented through spoken words and sentences.
• Communicate information and ideas in speaking so others will understand.
• Read and understand information and ideas presented in writing.
• Apply general rules to specific problems to produce answers that make sense.
• Identify and understand the speech of another person.