Cybersecurity Technician

People Technology And Processes; Norfolk (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

People Technology And Processes is seeking a Cybersecurity Technician in Norfolk to implement DISA STIGs, manage vulnerability findings, and support IA readiness for DoD evaluations.

The role requires DoD 8570 IAT Level II certification, 5+ years in cybersecurity operations, and hands-on experience with ACAS/eMASS. You will liaise with DISA and other teams to ensure compliant, secure network environments.

Qualifications

• Minimum 5 years of experience in cybersecurity operations supporting DoD systems.
• Active DoD 8570 IAT Level II certification required; CASP+, CISSP, or CEH a plus.
• Hands-on experience with STIG implementation, IAVA tracking, POA&M maintenance, and ACAS scanning.

Responsibilities

• Implement and enforce STIGs across enclave systems; ensure devices are hardened and IA standards are met.
• Track, update, and resolve vulnerabilities from inspections and audits; coordinate remediation actions with engineering/help desk.
• Assess IAVAs for applicability; coordinate patches and verify remediation across network assets.
• Participate in baseline audits of system configurations; address discrepancies with Network Engineers and Document Analyst.
• Perform ACAS vulnerability scans and manual configuration reviews; prioritize findings based on risk.
• Support IA review readiness for CCRI and DoD evaluations; assist with pre-inspection checklists and remediation timelines.
• Liaise with DISA security teams and DoD entities to coordinate patch rollouts and policy interpretation.
• Update IA artifacts and ensure version-controlled documentation stored per SOPs.
• Assist in suspected security incidents with triage, isolation, and reporting; coordinate with PM and government reps.
• Serve as cybersecurity SME to engineering, help desk, and cable plant; educate team on secure configurations and IA reporting.

Skills

Cybersecurity ops

DoD 8570 IAT II

STIG implementation

IAVA tracking

RMF familiarity

Tools

ACAS

eMASS

POA&M management

Job description

Overview

Job Location: Norfolk, VA 23551

PWS Title: Cybersecurity Technician

Location: Hampton Roads, VA

Clearance Type: Top Secret

Contingent upon award

Responsibilities

• Implement and enforce DISA Security Technical Implementation Guides (STIGs) across enclave systems. Ensure devices are properly hardened and configurations meet current Information Assurance (IA) standards.
• Track, update, and resolve open vulnerabilities and findings from inspections, scans, and audits. Coordinate with engineering and help desk staff to validate remediation actions and document closure.
• Assess all incoming Information Assurance Vulnerability Alerts (IAVAs) for applicability, coordinate deployment of required patches and updates, and verify remediation across all network assets.
• Participate in periodic baseline audits of system configurations to identify unauthorized changes. Work with Network Engineers and the Document Analyst to ensure discrepancies are addressed and documented.
• Perform regular ACAS (Assured Compliance Assessment Solution) vulnerability scans and manual configuration reviews. Analyze results, prioritize findings based on risk, and report unresolved items to the Site Lead and PM.
• Ensure systems are inspection-ready for IA reviews, Command Cyber Readiness Inspections (CCRI), and other DISA or DoD evaluations. Support pre-inspection checklists, documentation review, and remediation timelines.
• Liaise with DISA security teams, 844th Comm Group, and other oversight entities to coordinate patch rollouts, review policy updates, and clarify interpretation of cybersecurity guidance.
• Update IA artifacts such as device STIG checklists, risk acceptance memos, scan logs, and corrective action plans. Ensure documentation is version-controlled and stored in compliance with local SOPs.
• In the event of a suspected security incident, support triage, isolation, documentation, and reporting in coordination with the PM, Site Lead, and government representatives.
• Serve as a cybersecurity subject matter expert (SME) to engineering, help desk, and cable plant personnel. Educate team members on secure configurations, IA reporting procedures, and compliance responsibilities.

Qualifications

• Minimum 5 years of experience in cybersecurity operations supporting DoD systems.
• Active DoD 8570 IAT Level II certification (e.g., Security+ CE) required; CASP+, CISSP, or CEH a plus.
• Hands-on experience with STIG implementation, IAVA tracking, POA&M maintenance, and ACAS scanning.
• Familiarity with DISA’s RMF, eMASS, and enclave-level cybersecurity reporting.
• Ability to perform real-time monitoring, incident response coordination, and compliance reporting.
• Strong analytical and documentation skills.