Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent.
Minimum of Security+ certification
5+ years of progressive experience in cybersecurity, with a heavy focus on federal Information Assurance (IA) and the Risk Management Framework (RMF).
Proven track record working within federal agency guidelines (e.g., NOAA, DOC, GAO, OIG) and navigating complex internal/external audit cycles.
Deep, practical understanding of NIST SP 800-53 (Revision 4/5) security controls and the 7-step RMF process.
Demonstrated ability to author and defend highly technical artifacts, including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plan of Action and Milestones (POA&Ms;).
Proficiency in translating DISA STIGs and CIS Benchmarks into actionable technical requirements for operating systems, databases, and network devices.
Advanced experience operating and analyzing data from enterprise scanning tools, specifically Tenable Nessus, SecurityCenter, or ACAS.
Experience navigating SIEM platforms and security dashboards to monitor system logs, correlate events, and isolate anomalies.
Ability to conduct technical Security Impact Analyses (SIA) to determine how proposed system, hardware, or software changes will affect the overall security baseline.
Strong technical knowledge
Extensive knowledge of implementing security controls on Windows and Linux systems, both onsite and in a cloud environment (Amazon Web Services (AWS) and Microsoft Azure environments).