Full-time on-site at Washington Navy Yard
Bachelor's degree in Cyber Security, Information Systems, Computer Science, Mathematics or related field with at least 10 years of professional work-related experience; or 12 years of related professional work experience in lieu of a degree
An IAT Level III and IAM Level II certification as specified in the DoD 8140.
Or, have a SECNAV 5239 qualifying degree and obtain an IAT Level III and/or IAM II certificate as specified in the DoD 8140.
Ability to obtain and maintain Common Access Card (CAC), badge access to the customer's
Hands on working knowledge of Risk Management Framework.
Experience preparing and reviewing RMF packages.
Experience with information security configuration guides or DISA STIGs.
At least three (3) years-experience supporting and/or maintaining information security technologies.
Experience developing policies, procedures, and technical training materials.
Ability managing client relationships, including determining client needs/requirements, managing client expectations, and demonstrating commitment to delivering quality results.
Proficiency
Discern the protection needs (i.e., security controls) of information systems and networks
Evaluating test plans for applicability and completeness
Assessing security controls based on cybersecurity principles and tenets. (e.g., CNSSI No. 1253, NISTSP 800-53)
Performing impact/risk assessments
Interpreting vulnerability scanner results to identify vulnerabilities.
Knowledge of
Cyber defense and vulnerability assessment tools and their capabilities
Vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
And understanding of security technologies including vulnerability scanning (ACAS), firewalls, HBSS and data protection/encryption systems. OS/CE certification
Information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
Capabilities and applications of network equipment including routers, switches, bridges, servers, transmission media, and related hardware.
Business continuity and disaster recovery continuity of operations plans
