Cybersecurity Specialist with Security Clearance

People, Technology & Processes, LLC; San Diego (CA); On-site; USD 75,000 - 110,000; Full time

Job summary

People, Technology & Processes, LLC is seeking a Cybersecurity Specialist in Coronado, CA to support the organization's Cybersecurity program. The role requires active DoD Top Secret/SCI clearance and at least 3 years in cyber security, with IAM Level I proficiency.

The candidate will assist with RMF assessments, risk management, incident handling, and security monitoring, ensuring compliance with DoD standards and internal policies across networks and systems.

Qualifications

• Active DoD Top Secret/SCI clearance required.
• Minimum 3 years in Cyber Security.
• IAM Level I category is required.

Responsibilities

• Assist with risk and vulnerability assessments, compliance, and validation of IT systems to manage risk, control access, continuous monitoring and incident response, training and awareness, and ensure compliance with governance and policies in support of the Cybersecurity program.
• Provide inputs to cybersecurity reports, SAARs, SOPs, POAMs, and course of action development and the implementation of Cybersecurity mitigation strategies.
• Assist with RMF packages for A&A of existing systems and emerging technology.
• Provide inputs to RMF BoE artifacts and related documents and ensure BoE availability in the automated tool.
• Assist to track and maintain A&A databases, websites and tools for proper cybersecurity documentation and management.
• Assist to track and report compliance with Cybersecurity regulations and directives.
• Assist with Change Management and Incident Handling processes and Remedy tickets for Incident Response and cybersecurity requirements.
• Provide inputs to define incidents, problems, and events in the ticketing system and assist with diagnosis and resolution.
• Provide inputs to develop and maintain an ISCM Plan addressing ongoing awareness, vulnerabilities, controls and threats.
• Assist with network security evaluations and vulnerability assessments using ACAS, Nessus, and SCAP tools.
• Provide inputs to identify applicable STIGs and perform assessments; liaise with admins to correct deficiencies and prepare certification letters.

Skills

IAM Level I

Cybersecurity

Job description

Position title: Cybersecurity Specialist

Location: Coronado, CA

Clearance level required: Top Secret/SCI

Responsibilities

• Assist with performing risk and vulnerability assessments, compliance, and validation of IT systems to manage risk, control access, continuous monitoring and incident response, training and awareness, and ensure compliance with governance and policies in support of the Cybersecurity program.
• Provide inputs to cybersecurity reports, System Access Authorization Requests (SAAR), Standard Operating Procedures (SOP), Plan of Action and Milestones (POAM), and course of action (COA) development and the implementation of Cybersecurity mitigation strategies.
• Assist with Risk Management Framework (RMF) packages for the Assessment and Authorization (A&A) of existing systems and emerging technology.
• Provide inputs to RMF body of evidence (BoE) artifacts, to include but not limited to: Information Management Tool (IMT) RMF discovery checklist IMT-55, RMF supplemental checklist, hardware and software lists, system interface (ports and protocols), DoD Architectural Framework (DoDAF) and/or Defense Information Systems Network (DISN) architecture drawings and diagrams (topology, data flow, accreditation boundary, rack/room/equipment layout), Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG)/ Security Requirements Guide (SRG) check Files using the DISA STIG viewer tool, Security Content Automation Protocol (SCAP) files, scans, Concept of Operations (CONOPS), User Access Policies, Continuity of Operations (COOP), Privacy Impact Assessment (PIA), Interconnect Security Agreements (ISA), and POAMs. Ensure BoE documents are available in the USSOCOM-chosen automated tool.
• Assist to track and maintain A&A databases, web sites and tools to ensure that networks, systems, and devices are properly documented and managed from a cybersecurity perspective.
• Assist to track and report compliance with applicable Cybersecurity regulations and directives.
• Assist with Change Management and Incident Handling processes, to manage Remedy ticket requests for Incident Response and cybersecurity requirements.
• Provide inputs to accurately define incidents, problems, and events in the trouble ticketing system. Assist with diagnosing and resolving tickets and help maintain incident tracking and solution database/dashboard.
• Provide inputs to develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.
• Assist with performing network security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool.
• Provide inputs to identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. Liaisons with network and system administrators to correct identified deficiencies. Provide assessment of scans for new systems and applications being introduced or reviewed in the SIE, identify issues, and provide inputs to certification letters for the government. The contractor will liaison with government POCs to ensure systems and application meet the standards in the DISA STIGs.
• Assist with validating the patching of systems, perform validation scanning, develop POAM, and report as directed by applicable policies, procedures, and regulations.

Qualifications

• Must meet requirements for IAM level I category.
• Possess and maintain an active DoD TOP SECRET SCI security clearance.
• Possess a minimum of 3 years in Cyber Security.