Assessment, mitigation, and closure of network vulnerabilities and vulnerability management eMASS
Conducting ICS/SCADA system inventories following DoD guidance
Participating in continuous improvement of organizational cybersecurity posture
Conducting vulnerability scanning and document system vulnerabilities
Working with industry and government agencies on the design of platforms and integrated systems Working on government and/commercial projects implementing cybersecurity requirements in a variety of industrial control systems (e.g., building management, electronic security, fire alarm/mass notification, electrical distribution, power management, etc.)
Developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data
Apply general rules to specific problems to produce answers that make sense.
Identify and understand the speech of another person.
Supporting ISO standardization and Quality inspections
Reach by extending hands or arms in any direction.
Implementing DoD Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems
Working closely and supporting team members, vendors, and government customers
Establishing, managing, and tracking of Plan of Action & Milestones (POA&M) Applying STIGs to servers, databases, applications, and other hardware Security Readiness Review (SRR) Tools (scripts and ACAS)
Assisting in the development and verification of documentation necessary to complete the DoD RMF assessment and authorization process
Requirements
cissp
nist 800-53
acas
hbss
autocad
bachelor's degree
Ability to identify, maintain, and troubleshoot control network components
Communicate information and ideas in speaking so others will understand.
Working knowledge of other operational control systems
Excellent understanding of the DoD RMF lifecycle and NIST 800-53 controls implementation
7+ Years of Experience with a Bachelor's Degree in Information Technology, Risk Management, Cybersecurity
Awareness of NIST Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security and UFC 4-010-06 Unified Facilities Criteria (UFC) Cybersecurity of Facility
Familiarity with DoDIN CCRI/CCORI and CYBERCOM TASKORDS
Demonstrated background working with multidisciplinary teams
Read and understand information and ideas presented in writing.
Strong MS Excel, Word, PowerPoint, AUTOCAD, Cameo and Visio Skills is a plus.
Familiarity with various industry products
Strong Oral, Written and Presentation Skills with the ability and experience communicating directly with Customers
Listen to and understand information and ideas presented through spoken words and sentences.
12+ Years with a High School Diploma
Exposure to computer screens for an extended period of time.