OT Reviewer

Peraton; Maryland; On-site; USD 140,000 - 190,000; Full time

Job summary

Peraton seeks an experienced OT cybersecurity reviewer to support PACOM J6 by establishing the organizational foundation for IC/SCADA-focused assessments across the PACOM area of responsibility.

Location: Fort Meade, MD. Responsibilities include developing OT-specific assessment criteria aligned to DISA OT STIGs, performing vulnerability scans, and coordinating government acceptance of OT inspection packages.

Qualifications

• Minimum 12 years with BS/BA; 10 years with MS/MA; 7 years with PhD; Associate+14 or HS16+ years considered.
• Cross-certified in multiple related technology areas to conduct reviews of network vulnerability scan, virtual infrastructure, cloud, and other areas.
• Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and directives.
• Familiar with boundary security, network infrastructure, DNS, Exchange Server, network vulnerability scan, traditional security, virtual infrastructure, CDS, endpoint security, mobility, VVOIP, databases, Windows/UNIX infrastructures, web review, SRGs/STIGs.
• U.S Citizenship required; Active TS with ability to obtain/maintain SCI.

Responsibilities

• Develop OT-specific assessment criteria aligned to DISA OT STIGs.
• Provide expertise in Vulnerability Scan Procedures Guide and conduct scans.
• Conduct standard internal network scans from premise router inward.
• Perform Security Readiness Reviews (SRR).
• Ensure use of appropriate STIG/SRG and tools for each technology.
• Assess systems/networks for deviations from policy.
• Assist in developing EXSUMs/Briefings/Reports.
• Maintain cyber vulnerability review SOPs, TTPs, checklists, and guides.
• Prepare audit reports with remediation recommendations.
• Adapt existing inspection criteria framework for OT environments.
• Coordinate PACOM government acceptance for OT Inspection Criteria Package (Del 15) - Phase 1.

Skills

Cyber defense analysis

Vulnerability scanning

Boundary security

Network infrastructure

DNS

Education

Bachelor's degree

Master's degree

PhD

Tools

DISA STIGs

SRGs

Job description

Required Qualifications:

• Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D. Will consider Associate+14 or HS16+ years of experience.
• Cross-certified in multiple related technology areas in order to conduct reviews of network vulnerability scan, virtual infrastructure, cloud, and other related areas
• Able to analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives (i.e., analysis of mitigations)
• Familiar with the following areas:
  • Boundary Security (i.e., Firewalls, Network Device Management (NDM) policies, and any boundary technology)
  • Network Infrastructure (i.e., Firewalls, Routers, Switches, NDM, policies, and network infrastructure)
  • Domain Name System (DNS)
  • Exchange Server
  • Network Vulnerability Scan
  • Traditional Security
  • Releasable Review
  • Virtual Infrastructure and Environments
  • Cross Domain Solution (CDS) (Administrative and Limited Technical Review)
  • Endpoint Security Solutions
  • Mobility (Wireless, Wireless Discovery, 802.11, BlackBerry Enterprise Server (BES), BlackBerry Handheld, etc.)
  • Voice and Video over IP (VVOIP)
  • Database (Oracle, SQL, or any other database)
  • Windows Infrastructure
  • UNIX Infrastructure (includes all systems based on UNIX)
  • Web Review (i.e., services, servers, etc.)
  • Technology not specifically assigned above using SRGs, STIGs, or best practices utilizing the most appropriate certified technology area
• U.S Citizenship required
• Active TS with ability to obtain/maintain SCI

Desired Qualifications:

• CERTIFICATIONS: Security+, GSEC, Network+, GCED, CySA+ and Scrum Master.

Peraton seeks an OT Reviewerto support PACOM J6 establish the organizational foundation for IC/SCADA-focused cybersecurity assessments across the PACOM AOR.

Location: Fort Meade (Annapolis Junction), MD

Primary responsibilities:

• Develop OT-specific assessment criteria aligned to DISA OT STIGs
  • Provide expertise in current version of Vulnerability Scan Procedures Guide and any official correspondence sent via electronic transmission or verbal meetings to conduct scans.
  • Conduct standard internal network scans, from the premise router inward while ensure scanning of all site-managed network spaces.
  • Perform technical Security Readiness Reviews (SRR).
  • Ensure the use the appropriate technology STIG/SRG and, where applicable, the appropriate automated script or tool for that technology.
  • Conduct assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy.
  • Assist in developing EXSUMs/ Briefings/Reports.
  • Develop and maintain cybersecurity vulnerability review, inspection, and audit SOPs, TTPs, checklists, and guides.
  • Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions .
• Adapt DCDC's existing inspection criteria framework for OT environments
• Integrate with DCDC DRSI workflows
• Complete initial PACOM coordination for Government acceptance of the OT Inspection Criteria Package (Del 15) - Phase 1
• Conduct assessments across AOR - Phase II