Cyber Security Specialist

Agile Defense•Fort Huachuca, AZ

1d•Onsite

About The Position

The Cyber Security Specialist performs cybersecurity tasks to safeguard systems and information assets from unauthorized access, modification, or destruction. The role provides technical support for developing, operating, managing, and enforcing security capabilities for systems and networks, including information systems security, disaster recovery, database protection, and software development. The specialist supports JITC’s Authorization to Operate (ATO) efforts by collecting, reviewing, maintaining, and documenting artifacts required for JITC Information Assurance Controls under the Risk Management Framework (RMF), as well as materials requested in response to operational orders, directives, and data calls. The role maintains document repositories and updates DoD, DISA, and JITC repositories and databases. It also conducts physical-location and system reviews, including reviews for systems seeking permission to operate or connect to JITC infrastructure, and continually reviews assets to maintain eMASS records. The position is located at Fort Huachuca and requires a Secret clearance and Security+ certification. The work is performed indoors, with minimal possible occasional lifting and physical requirements that include sitting, standing, climbing stairs, and repetitive motion.

Requirements

Secret clearance.
Security+ (SEC+) certification.
A relevant technical degree and job-related experience meeting one of these pathways: bachelor’s degree; associate’s degree plus at least 2 years of experience; at least 60 semester hours of formal education toward an associate or bachelor’s degree plus at least 4 years of experience; or at least 6 years of experience.
Additional certificates in the area of specialization may substitute for experience or education, depending on the certification.
Ability to analyze information security systems and applications and recommend and develop security measures.
Ability to identify, report, and resolve security violations.
Ability to evaluate IT infrastructure risk and establish controls to mitigate loss.
Ability to recommend risk-management control improvements and system changes or upgrades.
Ability to work with end users to determine needs, implement policies and procedures, and track compliance.
Knowledge or ability to establish and administer information-security policies, goals, and procedures.
Ability to implement network security policies and procedures and protect network and telecommunications systems from unauthorized access, modification, or destruction.

Nice To Haves

Familiarity and knowledge of ACAS, eMASS, STIG checklists, and POA&Ms.

Responsibilities

Support JITC’s Authorization to Operate (ATO) efforts by providing focused input into systems used to document authorization efforts.
Collect, investigate, monitor, update, review, and catalog documentation, including drawings, written artifacts, procedures, and POA&Ms.
Ensure collected artifacts meet Government standards for accuracy, format, timeliness, and integrity.
Provide weekly and monthly status updates on tasks and monthly funding updates for requirements.
Quality-check deliverables for correct format, spelling, grammar, comprehensibility, working links, and completeness.
Conduct semi-annual reviews and updates of documents within the role’s purview.
Maintain a DoDNET-accessible repository for tracking draft and signed document copies.
Update DoD, DISA, and JITC repositories and databases.
Coordinate with the Government to collect drawings, SOPs, STIG checklists, ACAS reports, POA&M updates, PPSM updates, briefings, and other artifacts.
Conduct physical-location and system reviews, including reviews for systems requesting permission to operate or connect to JITC infrastructure.
Continually review assets using tools such as STIG checklists and ACAS data to ensure completeness and maintain eMASS records.
Use standard applications including MS Word, PowerPoint, Excel, MS Visio, and Adobe Pro.
Meet expectations to obtain a recommendation for authorization from the Security Compliance Assessor (SCA) from DISA Risk Executive Office.
Analyze information security systems and applications and recommend and develop effective security measures.
Identify, report, and resolve security violations.
Evaluate IT infrastructure risks and establish controls to mitigate loss.
Recommend improvements to risk-management controls and implementation of system changes or upgrades.
Work with end users to determine needs, implement policies and procedures, and track organizational compliance.
Establish, plan, and administer policies, goals, and procedures for the information security function.
Implement network security policies and procedures, ensure security access across network and telecommunications systems, and protect against unauthorized access, modification, or destruction.