Information Technology Specialist (Cyber Security)

Summary The Information Technology Specialist (Cyber Security) shall be responsible for ensuring the security, integrity, and availability of information assets through the application of information security/information assurance policies, principles, and practices in the delivery of IT services and the rapid and effective response to security incidents. Responsibilities Develop, implement, review, and evaluate System Security Plans, Interconnection Security Agreements, Risk Assessments, Plan of Actions and Milestones (POAM), System Requirements Traceability Matrix (SRTM), Security Assessment Reports, and Contingency Plans as well as other required documentation to satisfy Certification and Accreditation (C&A)/Assessment and Authorization (A&A) requirements in accordance with government policies and procedures. Define and/or review stakeholder security objectives, protection needs and concerns, security requirements, and associated validation methods. Perform/review scans, review the results, and write necessary reports and plans. Monitor systems performance and report trends or incidents that impact security posture of supported systems and networks. Utilize Army approved vulnerability scanning tools and reports, to identify, remediate, and report vulnerabilities/trends and to support remediation analytics. Submit network and system changes and major version software updates through the change management process for approval prior to deployment or distribution. Participate in security compliance efforts that will be assessed and validated by the government IAW DoD Instruction 8510.01 and National Institute of Standards and Technology (NIST) Special Publication 800-53, Revision 5, and NIST Special Publication 800-53A, Revision 4. Provide collaborative courses of action (COA) for observed issues, trends, or vulnerabilities. Collaborate in threat assessment, vulnerability analysis, risk assessment, and system/network risk migration. Other duties as assigned Qualifications Bachelor’s degree in an Information Technology related field OR High school diploma or GED and 6+ years of information technology experience related to the cyber security discipline, or a combination of experience and training may be used in lieu of a degree Possess Baseline Certification for IAM-I IAW DoD 8570.01-M and BBP 05-PR-M-0002 (CompTIA Security+ CE, (ISC)2 Certification Authorization Professional, or GIAC Security Leadership Certificate) Secret clearance (ADP-II (AKA: IT-2)/T3 – Tier 3, coupled with eligibility for a top secret clearance (ADP-I (AKA: IT-1): T5 – Tier 5, is required The position requires a COVID vaccination or an approved accommodation/exemption for a disability/medical condition or religious belief Knowledge, Skills and Abilities Proficiency in the use of cyber security tools (current Army approved version) to maintain acceptable security posture and identify/remediate vulnerabilities. Knowledgeable in the Army’s Information Assurance Vulnerability Management (IAVM) program, process, and mitigation actions. Knowledgeable in supporting roles and interactions of Army enterprise cyber tools (e.g., ACAS, AESS, AEMS, SCCM, eMASS, SCAP/STIG, Active Directory, and Group Policy). Experience in security engineering involving various computer hardware and software operating systems and application solutions in both a Cloud and in LAN/WAN configurations is desired. Experience implementing DoD and Federal IA Assessment and Authorization (A&A) processes, STIG review, IA controls, and developing and maintaining associated documentation. Experience with PowerShell and Command scripting is desired.
Chenega IT Enterprise Services, LLC Teleworking Permitted? Yes Teleworking Details Teleworking Permitted at discretion of customer. Expect full-time remote