Cyber Security Specialist – Associate (Cybersecurity)

Agile Defense•Fort Huachuca, AZ

1d•$80,000 - $93,000•Onsite

About The Position

Agile Defense is hiring a Cyber Security Specialist – Associate to support information assurance and cybersecurity operations at Fort Huachuca, Arizona. The role conducts routine information system audits, evaluates systems against Risk Management Framework (RMF) requirements and NIST controls, and supports continuous monitoring and maintenance of RMF packages in eMASS. It also provides certification and accreditation support, performs risk and vulnerability assessments, and keeps system security documentation current. The specialist uses automated security scanning tools to identify vulnerabilities, analyzes and reports findings, and works with technical teams to track and mitigate risks and resolve compliance issues. The role also researches security requirements and regulations, reviews proposed courses of action, develops and reviews security documentation and procedures, and prepares reports and presentations for security leaders. The position is 100% onsite and requires an active DoD Secret clearance before starting.

Requirements

Bachelor’s degree and 4–5 years of experience, or equivalent relevant work experience.
Active DoD Secret clearance; clearance must be held before starting.
One of the listed required certifications: CompTIA Security+ CE, Cloud+, Global Industrial Cyber Security Professional, GIAC Security Essentials, or Systems Security Certified Practitioner.
Excellent communication and interpersonal skills.
Knowledge of network-specific DISA Security Technical Implementation Guides and checklists.
Knowledge of asset scanning.
Experience performing audits within a DoD organization.
Experience with Risk Management Framework (RMF) and vulnerability management.

Nice To Haves

Knowledge of Enterprise Mission Assurance Support Service (eMASS).
Knowledge of Assured Compliance Assessment Solution (ACAS) and Tychon vulnerability scanning and reporting.
Knowledge of ePolicy Orchestrator (ePO) and Continuous Monitoring and Risk Scoring (CMRS).

Responsibilities

Conduct routine information assurance audits of information systems to verify that required security controls have been applied and maintained.
Evaluate information systems for compliance with RMF, NIST 800-53 controls, and special directives.
Assist with continuous monitoring of RMF packages in eMASS, including POA&Ms, test results, and risk assessments.
Record and prepare audit artifacts and keep the repository of RMF documentation current.
Support certification and accreditation by developing security and contingency plans and conducting risk and vulnerability assessments.
Use NIST 800-series publications as references for certification and accreditation, system security plans, risk assessments, and other security requirements.
Create, edit, and review organization- and team-level documentation for clarity and accuracy; assist in developing security TTPs, SOPs, processes, plans, and diagrams.
Use automated security scanning tools, such as SCAP, ACAS, and Tychon, to identify potential vulnerabilities.
Analyze and report findings to technical teams and leadership for tracking and mitigation.
Research technical-team requests concerning DISA STIG checklists and DoD and Army regulations.
Explain requirements to system administrators and review proposed courses of action, recommending secure options while balancing operational and mission requirements.
Assist with identifying, tracking, and remediating information-system security risks.
Prepare and deliver written reports and oral presentations to the Security Manager, Information Assurance Manager, and other senior leaders or staff.
Coordinate with internal and external entities to improve processes and procedures for analysis, tracking, mitigation, and reporting.
Coordinate with cross-functional teams and management to resolve compliance issues.
Support or lead special projects as required and complete other duties assigned by management.