Information Security Specialist III (IA Policy Administrative Services)

Na Oiwi Kane; Killeen (TX); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical, dental, vision, disability, &

Life insurance

Flexible Spending Accounts

401(k)

PTO

Tuition reimbursement

Paid federal holidays

Job summary

KaiHonua, LLC is seeking an Information Security Specialist III to join our team at Fort Cavazos (Killeen), TX. The role focuses on IA policy, RMF accreditation, and defense-in-depth security engineering across DoD environments.

The candidate will develop and maintain security policies, support PKI services, analyze incidents, and supervise CNDSP activities, ensuring compliance with DoD directives and AR 25-2 BBPs.

Qualifications

• Bachelor's Degree in Computer Science, Cybersecurity, Computer Engineering, or related discipline preferred.
• 3+ years of experience performing Information Assurance functions and using RMF IT security controls and policies preferred.
• Must possess and maintain an IT-I level certification IAW AR 25-2 and IAT-II/IAM-II certifications IAW DoD 8570.01-M.
• Must be a U.S. citizen.

Responsibilities

• Provide oversight for the Computer Network Defense-Service Provider (CNDSP).
• Work with system owners to close IAVMs/ICVMs and open Plan of Action and Milestones (POA&Ms) in a rapid fashion, in accordance with DoD instructions/directives.
• Provide Defense in Depth principles and technology in security engineering designs and implementation.
• Analyze existing and future systems, reviewing security architectures, and developing engineering solutions that integrate information security requirements to proactively manage information protection.
• Apply security risk assessment methodology to system development, including assessing and auditing network penetration testing, antivirus deployment, risk analysis.
• Conduct Computer Incident Response Team (CIRT) activities, including forensic analysis.
• Engineer and deploy network defense countermeasures such as anti-virus, anti-spam, and intrusion detection and prevention system solutions.
• Analyze IA security events, including threat model development and resulting security risk analysis of systems.
• Review and assess information security events and logs via sophisticated security information/event manager.
• Plan, implement, and manage a Defense In Depth for the total network and/or enclaves within the network to include such items as: scanning, remediation, host and network intrusion detection/prevention, firewalls, proxy servers, web cache, virus programs, vulnerability scanning, content filtering, remote dial in protection, Host Based Security Services, Directory Services, and Certification and Accreditation, DoD Instruction 5200.40, accreditation guidance and advice IAW AR 25-2 and IA Best Business Practices (BBPs). Plan, respond, investigate, and report undisclosed classified incident remediation.
• Assess and mitigate system security threats/risks throughout the program life cycle
• Validate system security requirements definition and analysis and review/approve System Security Plans for enterprise-wide architectures
• Maintain Agency public key infrastructure system Implement security designs in hardware, software, data and procedures
• Provide support for the Department of Defense (DoD) Public Key Infrastructure (PKI) service.
• Responsible for requesting, receiving, installation, and accountability of system (server) PKI certificates and providing technical support for PKI.
• Provide Certification and Accreditation, as well as provide Automated Information System Accreditation support
• Provide Security Risk Assessment. Perform risk analysis of resources, controls, vulnerabilities, impact of losing systems' capabilities and threats to the mission objective; provide analysis to facilitate decisions to implement security countermeasures or mitigate risk; implement countermeasures; periodically review program.
• Other duties as required

Skills

Information Assurance

RMF controls

Policy compliance

Education

Bachelor's Degree in CS/Cybersecurity/Engineering

Tools

DoD 8570.01-M

AR 25-2

Job description

Position: Information Security Specialist III (IA Policy Administrative Services)

Location: Fort Cavazos, Texas (Killeen)

Job Summary

KaiHonua, LLC has an immediate opening for an Information Security Specialist to join our rapidly growing team. The Information Security Specialist performs under general direction and uses current information security technology disciplines and practices to ensure the confidentiality, integrity and availability of Government information assets in accordance with established standards and procedures. The position will perform the following:

• Develop and maintains knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain security policies and standards, and ensures compliance throughout the organization
• Provide Risk Management Framework, circuit/system accreditation and certification policy services
• Participate in the development or modification of the computer environment IA security program plans and requirements
• Develop procedures to ensure system users are aware of their IA responsibilities before granting access to DoD information systems
• Recognize possible security violations and takes appropriate action to report the incident, as required
• Ensure IA security requirements are appropriately identified in computer environment operation procedures
• Collect and maintain data needed to meet system IA reporting requirements

Responsibilities

(Not listed in order of importance; other duties may be assigned) and must be able to perform the following with minimal guidance:

• Provide oversight for the Computer Network Defense-Service Provider (CNDSP)
• Work with system owners to close IAVMs/ICVMs and open Plan of Action and Milestones (POA&Ms) in a rapid fashion, in accordance with DoD instructions/directives. Review all POA&MS with the Program Manager on at least a quarterly basis and update the POA&Ms accordingly.
• Provide Defense in Depth principles and technology in security engineering designs and implementation
• Analyze existing and future systems, reviewing security architectures, and developing engineering solutions that integrate information security requirements to proactively manage information protection
• Apply security risk assessment methodology to system development, including assessing and auditing network penetration testing, antivirus deployment, risk analysis
• Conduct Computer Incident Response Team (CIRT) activities, including forensic analysis
• Engineer and deploy network defense countermeasures such as anti-virus, anti-spam, and intrusion detection and prevention system solutions
• Analyze IA security events, including threat model development and resulting security risk analysis of systems
• Review and assess information security events and logs via sophisticated security information/event manager
• Plan, implement, and manage a Defense In Depth for the total network and/or enclaves within the network to include such items as: scanning, remediation, host and network intrusion detection/prevention, firewalls, proxy servers, web cache, virus programs, vulnerability scanning, content filtering, remote dial in protection, Host Based Security Services, Directory Services, and Certification and Accreditation, DoD Instruction 5200.40, accreditation guidance and advice IAW AR 25-2 and IA Best Business Practices (BBPs). Plan, respond, investigate, and report undisclosed classified incident remediation.
• Assess and mitigate system security threats/risks throughout the program life cycle
• Validate system security requirements definition and analysis and review/approve System Security Plans for enterprise-wide architectures
• Maintain Agency public key infrastructure system Implement security designs in hardware, software, data and procedures
• Provide support for the Department of Defense (DoD) Public Key Infrastructure (PKI) service.
• Responsible for requesting, receiving, installation, and accountability of system (server) PKI certificates and providing technical support for PKI.
• Provide Certification and Accreditation, as well as provide Automated Information System Accreditation support
• Provide Security Risk Assessment. Perform risk analysis of resources, controls, vulnerabilities, impact of losing systems' capabilities and threats to the mission objective; provide analysis to facilitate decisions to implement security countermeasures or mitigate risk; implement countermeasures; periodically review program. Recognize possible threats and review evaluations for compliance and non-compliance.
• Other duties as required

Requirements

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor's Degree in Computer Science, Cybersecurity, Computer Engineering, or related discipline preferred
• 3+ years of experience performing Information Assurance functions and using RMF IT security controls and policies preferred
• Must possess and maintain an IT-I level certification IAW AR 25-2 and IAT-II/IAM-II certifications IAW DoD 8570.01-M
• Must be a U.S. citizen

Security Clearance

Position may require a DoD security clearance

Physical Requirements

Work may involve sitting or standing for extended periods of time. Position may require typing and reading from a computer screen. Must have sufficient mobility, including but not limited to bending, reaching, and kneeling to complete daily duties in a timely and efficient manner. May include lifting weight up to thirty (30) pounds as necessary.

• A valid driver's license with a clean driving record may be required
• Occasional use of company vehicle while on work site

Benefits

• Medical, dental, vision, disability, and life insurance
• Flexible Spending Accounts
• 401(k)
• PTO
• Tuition reimbursement
• Paid federal holidays

Company

Headquartered in Hawaii, KaiHonua, LLC is a Native Hawaiian Organization (NHO) owned SBA Small Disadvantaged Business specializing in global information technology and offering professional solutions in IT Design & Installation, Cybersecurity Engineering & Support, Application Integration & Development, Software & Hardware Engineering, Network & Systems Management, Information Systems Security, and Business Management Services.

Leveraging over 30 years of providing IT services to the federal & commercial market with projects located around the world, our team possesses innovative expertise in the development of a wide range of technology solutions. KaiHonua, LLC is an equal opportunity employer.

Our service commitment is simple - "Quality IT Solutions... On Time & On Budget."

KaiHonua, LLC reserves the right to change or modify job duties and assignments at any time. The above is not all encompassing. Positions functions and qualifications may vary depending on business needs.

Equal Opportunity

KaiHonua, LLC is an equal opportunity employer and does not discriminate against applicants based on race, color, creed, religion, medical condition, legally protected genetic information, national origin, sex (including pregnancy, childbirth or related medical condition), sexual orientation, gender identity and expression, age, disability, or Vietnam era, or other eligible veteran status or legally protected characteristics.

Job Snapshot

Employee Type Full-Time

Location Killeen, TX (Onsite)

Job Type Information Technology

Experience Not Specified

Date Posted 04/16/2024