Information Security Specialist

Agile Defense; Virginia (MN); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) with company match

PTO & paid holidays

Annual tuition/training assistance

Job summary

Agile Defense seeks an Information Security Specialist to join our on-site team at Quantico, VA. You will manage, monitor, and secure IT infrastructure, perform system backups, and develop security documentation to support RMF and STIG compliance.

The role requires an active Top Secret clearance and deep knowledge of NIST frameworks, security controls, and incident response. You will collaborate with ISSO and system admins to mitigate vulnerabilities and ensure continuous monitoring.

Qualifications

• Bachelor's degree in a related field and four years of related experience, or six years total with four years specialized experience.
• Certifications: ISC2 CGRC, ISC2 SSCP, CompTIA CySA+, CompTIA Security+ CE, or ISC2 Certified in Cybersecurity.

Responsibilities

• Manage, monitor, and maintain IT infrastructure to ensure system uptime and optimal performance.
• Maintain performance to ensure throughput does not degrade as workload increases.
• Perform regular system backups, recovery procedures, and data management tasks.
• Provide technical support and assistance to users.
• Develop and maintain system documentation, including configurations, procedures, and troubleshooting guides.
• Plan and implement software updates, hardware upgrades, and migrations with minimal disruption to operations.
• Provide technical support for systems and applications.
• Monitor and optimize the performance of the infrastructure.
• Develop and implement backup and recovery strategies.
• Ensure compliance with security and regulatory standards.
• Create, modify, and disable user accounts in accordance with account management procedures.
• Monitor and review audit logs for suspicious activity.
• Develop and update SOPs for all activities.
• Collaborate with ISSO to support RMF process and ATO packages.

Education

Bachelor's degree in related fields

Tools

BigFix

Nutanix

Splunk

Tenable Security Center

Security Compliance Checker

STIG Viewer

NMAP

Nipper

Wireshark

Microsoft Defender for Endpoint

RSA Authentication Manager

Active Directory

Cisco Firepower

Job description

Information Security Specialist

Location: Quantico, VA – 100% on-site

Clearance

• Active Top Secret clearance required

Benefits

• Health, dental, and vision insurance coverage
• 401(k) with company match
• PTO & paid holidays
• Annual tuition/training assistance

Responsibilities

• Manage, monitor, and maintain IT infrastructure to ensure system uptime and optimal performance.
• Maintain performance to ensure that the throughput of the system does not degrade unexpectedly as the volume of work increases.
• Perform regular system backups, recovery procedures, and data management tasks.
• Provide technical support and assistance to users.
• Develop and maintain system documentation, including configurations, procedures, and troubleshooting guides.
• Plan and implement software updates, hardware upgrades, and migrations with minimal disruption to operations.
• Provide technical support for systems and applications.
• Monitor and optimize the performance of the infrastructure.
• Develop and implement backup and recovery strategies.
• Ensure compliance with security and regulatory standards.
• Create, modify, and disable user accounts in accordance with account management procedures.
• Monitor and review audit logs for suspicious activity.
• Develop and/or update standard operating procedures (SOPs) for all activities.
• Collaborate and provide supporting artifacts and documentation to ISSO to support RMF process and ATO packages.
• Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information.
• Possess a strong understanding of the NIST Risk Management Framework (NIST SP 800-37), NIST Cybersecurity Framework, NIST Security and Privacy Controls for Information Systems and Organizations (NIST SP 800-53 revisions 5), Zero Trust Architecture (NIST SP 800-207), Standards for Security Categorization of Federal Information and Information Systems (FIPS-199) and Minimum Security Requirements for Federal Information and Systems (FIPS 200).
• Possess familiarity with STIG Viewer, SCAP Compliance Checker (SCC), and Visio applications.
• Perform and review Tenable Security Center scans.
• Maintain hardware/software lists.
• Perform operating system, application, hardware/infrastructure, etc. hardening using DISA Security Technical Implementation Guidelines (STIGs) and/or SRGs as applicable for all appropriate systems.
• Implement the latest applicable Security Requirements Guide (SRG), STIG, and/or benchmarks. Utilize the latest Security Content Automation Protocol (SCAP) tool and manual SRGs, STIGs, and/or benchmarks. Analyze latest STIG updates on a minimum of a quarterly basis.
• Collaborate with system administrators, network operations, etc. to address system vulnerabilities, track progress and ensure security measures are implemented effectively.
• Conduct security control assessments and validations of a system's technical and non-technical security features to mitigate known threats and vulnerabilities effectively.
• Ensure the completion of all necessary RMF products and reporting in accordance with policy and in collaboration with the information system security officer / security control assessor.
• Assist in updating any documentation related to risk assessments (such as Risk Assessment Reports, Plan of Actions & Milestones (POA&M), etc.) based on the results of assessments.
• Conduct the necessary vulnerability analysis to facilitate the mitigation and determination of residual risk as required.
• Provide support for the continuous monitoring program as needed, especially when system level continuous monitoring results are essential to meet ongoing authorization requirements.
• Assist in contingency planning, testing, and execution as necessary.
• Support the incident response process and actively participate in meetings with the program team, offering updates on project status.

Required Qualifications

• Bachelor's degree in related fields (e.g., Computer Management Information Systems, Computer Science) and four (4) years related experience, or six (6) years applicable experience which should include four (4) years specialized experience.
• Certification: ISC2 CGRC, ISC2 SSCP, CompTIA CySA+, CompTIA Security+ CE, or ISC2 Certified in Cybersecurity.

Preferred Qualifications

• BigFix, Nutanix, Splunk, Tenable Security Center, Security Compliance Checker, Security Technical Implementation Guide (STIG) Viewer, NMAP, Nipper, Wireshark, Microsoft Defender for Endpoint, RSA Authentication Manager, Microsoft Windows Active Directory, CISCO Firepower Management Center.
• Microsoft Certified Professional (MCP), Cisco Certified Network Associate (CCNA), and/or VMware Data Center Virtualization.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities