4+ years of experience working with cybersecurity, information assurance, information system security engineering, or IT security
Experience engineering, administering, hardening, patching, and maintaining Windows Server and RHEL systems in cybersecurity or mission environments, including STIG compliance, security baselines, and vulnerability remediation
Experience administering ACAS, Nessus, or vulnerability management and security scanning technologies, including scanner configuration, plugins, repositories, asset discovery, scan analysis, troubleshooting, and remediation coordination, and administering Trellix or McAfee ePolicy Orchestrator (ePO) and AESS technologies, including HIPS, VSE, DLP, security policy configuration and tuning, deployment, troubleshooting, and endpoint security maintenance
Experience with centralized log monitoring, IDS/IPS, and security event monitoring technologies, including analyzing security events and using monitoring results to identify risk and support remediation
Experience supporting classified and releasability environments, segmented networks, exercises, and mission systems with distinct authorization, scanning, monitoring, or security boundaries, and applying NIST RMF and supporting information systems through security control implementation, assessment and authorization, continuous monitoring, remediation, and continued authorization activities
Experience with eMASS, Xacta, or a DoD RMF assessment and authorization management platform, including system profile management, security controls, control evidence, STIG artifacts, scan evidence, POA&Ms;, and authorization documentation
Secret clearance
HS diploma or GED
DoD 8140 Policy Framework Cyber Workforce Certifications such as CISSP, CASP, SecurityX, or CISM Certification