Information Systems Security Specialist

Nightwing; Virginia (MN); On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401k plan

PTO and Holidays

Job summary

Nightwing seeks an Information Systems Security Specialist to support DHS Hunt and Incident Response Team missions. You will manage the RMF lifecycle for IT systems and work with leadership to ensure security requirements are met.

Applicants should have 5+ years in information security, hands-on Linux or AWS experience, and a TS/SCI clearance. The role involves collaboration with ISSM/CISO and multiple project teams across environments.

Qualifications

• 5+ years of directly relevant experience in information security management.
• Hands on experience with Linux operating systems or Amazon Web Services.
• Experience supporting RMF process and full ATO lifecycle, including SSP and POAM management.

Responsibilities

• Manage the RMF lifecycle for IT systems.
• Lead technology assignments and assess security infrastructures.
• Interface with senior management and clients during negotiations.
• Develop and implement security controls and documentation across lab systems.
• Coordinate risk analyses and security planning.

Skills

Active TS/SCI clearance

5+ years information security

Linux / AWS

RMF / A&A knowledge

Hunting and incident response

Security controls design/POAM

Collaboration with ISSM/CISO

NIST RMF experience

Education

BS Information Management

Cybersecurity

Computer Science

High School Diploma + 7+ years

Tools

Nessus

Security Center

Tenable Vulnerability Management

CSAM / Xacta / Archer / RegScale

AWS CLI / Lambda

Job description

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

DHS’s Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. HIRT provides DHS’s front line response for cyber incidents and proactively hunting for malicious cyber activity. Nightwing, as a prime contractor to DHS, performs HIRT investigations to develop a preliminary diagnosis of the severity of breaches. Nightwing provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Nightwing is seeking an Information Systems Security Specialist to support this critical customer mission.

Responsibilities:

• Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems
• Assisting technical/management leadership on major tasks or technology assignments
• Establishing goals and plans that meet project objectives
• Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met
• Participating in client negotiations and interfacing with senior management
• Supporting decision making and domain knowledge that may have a critical impact on overall project implementation
• Providing support to plan, coordinate, and implement a cybersecurity lab’s information security
• Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems
• Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements
• Implementing and development of the DHS IT security standards
• Gathering and organizing technical information about the lab’s mission goals and needs, existing security products, and ongoing programs
• Performing risk analyses which also includes risk assessment
• Planning and leading major technology assignments
• Evaluating performance results and recommends major changes affecting short-term project growth and success
• Functioning as a cyber technical expert across multiple project assignments
• Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs

Required Skills:

• U.S. Citizenship
• Must have an active TS/SCI clearance
• Must be able to obtain DHS Suitability
• 5+ years of directly relevant experience in information security management
• Hands on experience with Linux operating systems or Amazon Web Services
• Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management
• Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Mgmt planning and execution
• Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks
• Ability to apply a comprehensive knowledge across key tasks and high impact assignments
• Knowledge of Computer Network Defense (CND) policies, procedures & regulations
• Knowledge of defense-in-depth principles and network security architecture
• Knowledge of ATO requirements and strong experience with POAMs.
• Knowledge and experience with full range of Microsoft Office products (Word, Excel, Powerpoint, and Visio)
• Knowledge of boundary protection and network segmentation
• Knowledge of authentication and access management techniques
• Experience with implementing and assessing security controls for hardware, software, and network deployments
• Must be able to work collaboratively with internal and external stakeholders across physical locations

Desired Skills:

• Experience with Risk Management Framework software (CSAM, Xacta, Archer, RegScale)
• Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz, burp)
• Experience with Endpoint Protection tools like CrowdStrike or CarbonBlack
• Working knowledge of SIEM tools like Splunk, SOAR, or ELK
• Familiarity with role-based account processing operations
• Familiarity with zero trust architectures
• Familiarity with scripting languages (python, AWS CLI, Lambda, bash, powershell)

Required Education:BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience.Desired Certifications:

• DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft

Syndeo: ESS-3606

Salary & Benefits

The salary associated with this position ($99,000-$206,000) is commensurate with the selected candidate’s qualifications, years of relevant experience, and demonstrated level of expertise. Compensation will be determined based on these factors to ensure alignment with skills, responsibilities, and market standards.

Nightwingoffers medical, vision and dental insurance coverage in addition to a 401k plan, PTO, Holidays, and additional insurances.

Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.