JCIP Expert Reviewer – UNIX

Pueo Business Solutions LLC; McLean (VA); On-site; USD 100,000 - 140,000; Full time

Job summary

A cybersecurity solutions provider is seeking a JCIP Technical Reviewer to evaluate and enhance the cybersecurity posture of enterprise environments. The role involves technical assessments of UNIX systems, performing manual audits, and mentoring junior inspectors. Candidates should possess a master’s degree and appropriate certifications, with a requirement for a Top Secret Security Clearance. This position may require travel to support onsite inspections and offers a dynamic working environment focused on security enhancement.

Qualifications

• Possess a master’s degree with 8+ years of experience or equivalent certifications.
• Hold a Top Secret Security Clearance with SCI eligibility.
• Ability to pass CI Poly.

Responsibilities

• Conduct technical assessments of UNIX-based systems.
• Perform manual audits of UNIX configurations and access controls.
• Lead and mentor Level 1 UNIX inspectors.
• Stay updated on UNIX threats and best practices.
• Participate in inspection planning and execution.

Skills

UNIX system security audits

System hardening

Security auditing

Leadership and mentoring

Shell scripting

Verbal and written communication

Analyzing system logs

Education

Master’s degree

Bachelor’s degree with additional experience

Tools

NIST 800-53

STIGs

Job description

Roles and Responsibilities

JCIP Technical Reviewers play a pivotal role in evaluating the cybersecurity posture of enterprise environments across the Intelligence Community (IC). Conduct thorough technical assessments of UNIX-based systems (e.g., Solaris, AIX, Linux variants) for compliance with Intelligence Community Directives (ICDs), Security Technical Implementation Guides (STIGs), Security Requirement Guides (SRGs), and NIST 800-53 Rev 5 and 800-171 controls.

Essential

JCIP Technical Reviewers play a pivotal role in evaluating the cybersecurity posture of enterprise environments across the Intelligence Community (IC). Conduct thorough technical assessments of UNIX-based systems (e.g., Solaris, AIX, Linux variants) for compliance with Intelligence Community Directives (ICDs), Security Technical Implementation Guides (STIGs), Security Requirement Guides (SRGs), and NIST 800-53 Rev 5 and 800-171 controls.

Other

• Perform manual audits of UNIX configurations, user access controls, file system permissions, patch management, and security logging.
• Analyze vulnerabilities related to UNIX systems and recommend mitigation strategies aligned with JCIP and IC security policies.
• Interpret and apply complex STIG requirements specific to UNIX environments.
• Collaborate with system administrators, security teams, and leadership to present findings and provide actionable security recommendations.
• Lead and mentor Level 1 UNIX inspectors, providing guidance on technical evaluations and inspection reporting.
• Stay updated on emerging UNIX threats, patches, and best practices for system hardening.
• Participate in inspection planning, execution, and reporting.
• Travel as required to support onsite inspections. (8‑12 weeks of travel avg, some international and passport required).
• The primary day‑to‑day seat is at Tysons Corner.

Knowledge, Skills, and Abilities

Knowledge

• Deep understanding of UNIX operating systems including Solaris, AIX, and major Linux distributions (Red Hat, CentOS, Ubuntu).
• Expertise in system hardening, patch management, user and group management, file permissions, and security auditing.
• Proficient in interpreting UNIX‑specific STIGs and aligning findings with NIST 800‑53/800‑171 controls.
• Familiarity with shell scripting for automation of audit and remediation tasks.

Skills

• Strong hands‑on experience performing manual UNIX system security audits.
• Ability to analyze system logs, identify anomalies, and assess system security posture.
• Effective verbal and written communication skills for technical briefings and reporting.
• Leadership and mentoring capabilities for guiding junior inspectors.

Abilities

• Independently lead UNIX inspections with minimal supervision.
• Provide expert recommendations for system configuration and architecture improvements.
• Manage inspection schedules and deliverables effectively.
• Adapt inspection techniques to diverse UNIX environments and organizational policies.

Requirements

Certifications

• Obtain an IAT‑III or Maintain IAT Level III Certification in compliance with DoD 8570.01‑M and DoD Directive 8140 Cyberspace Workforce Management.
• CASP+ CE
• CCNP Security
• CISA
• CISSP (or Associate)
• GCED
• GCIH
• CCSP

Level Certifications Indicative of Qualification

• Level 1 - CompTIA Linux+, Red Hat Certified System Administrator (RHCSA), Solaris Certified System Administrator (SCSA)
• Level 2 - Red Hat Certified Engineer (RHCE), Linux Professional Institute Certification (LPIC‑2), Certified Information Systems Security Professional (CISSP)
• Level 3 - Red Hat Certified Architect (RHCA), GIAC Certified UNIX Security Administrator (GCUX), CISSP‑ISSAP

Education

Possess a master’s degree, with 8+ years of total experience/equivalent certifications.

Other

Master’s degree may be substituted with a bachelor’s degree and 5+ years of additional experience/equivalent certifications, for a total of 13+ years.

Clearance

Hold a Top Secret Security Clearance with SCI eligibility.

Ability to Pass CI Poly.