Cyber Security Specialist

Agile Defense•Fort Huachuca, AZ

1d•Onsite

About The Position

The Cyber Security Specialist performs cybersecurity tasks to safeguard systems and information assets from unauthorized access, modification, or destruction. The role manages information systems security, including disaster recovery, database protection, and software development, and provides technical support for developing, operating, managing, and enforcing security capabilities for systems and networks. The specialist supports JITC’s Authorization to Operate (ATO) efforts by collecting, investigating, monitoring, updating, reviewing, and cataloging authorization documentation and artifacts. These include drawings, written artifacts, procedures, POA&Ms, and other documents needed to meet JITC Information Assurance Control requirements under the Risk Management Framework (RMF), as well as operational orders, directives, and data calls. The specialist ensures collected artifacts meet Government standards for accuracy, format, timeliness, and integrity. The role also maintains document repositories and updates DoD, DISA, and JITC repositories and databases; coordinates artifact collection with the Government; conducts physical location and system reviews; and continually reviews assets and security records using STIG checklists and ACAS data. The position is located at Fort Huachuca and requires a Secret clearance and Security+ certification.

Requirements

Security+ (Sec+) certification is required.
A relevant technical bachelor’s degree; or an associate degree and at least 2 years of experience; or at least 60 semester hours of formal education toward an associate or bachelor’s degree and at least 4 years of experience; or at least 6 years of experience.
Experience must be related to the job duties. A degree, when used to satisfy the education requirement, must be in a relevant technical curriculum.
Secret clearance.
Ability to analyze information security systems and applications and recommend and develop security measures.
Ability to identify, report, and resolve security violations.
Ability to evaluate IT infrastructure risks and establish controls to mitigate loss.
Ability to recommend improvements to risk management controls and implement system changes or upgrades.
Ability to work with end users, implement policies and procedures, and track compliance.
Ability to establish, plan, and administer information security policies, goals, and procedures.
Ability to implement network security policies and procedures, ensure network security access, and protect systems and information from unauthorized access, modification, or destruction.
Ability to use MS Word, PowerPoint, Excel, MS Visio, and Adobe Pro.
Ability to meet the listed physical requirements: sit, stand, climb stairs, and perform repetitive motion.

Nice To Haves

Familiarity and knowledge of ACAS, eMASS, STIG checklists, and POAMs.
Additional certificates in the area of specialization may substitute for experience or education, depending on the certification.

Responsibilities

Provide focused input into systems documenting JITC Authorization to Operate efforts.
Collect, investigate, monitor, update, review, and catalog authorization documentation and artifacts, ensuring compliance with Government standards for accuracy, format, timeliness, and integrity.
Provide weekly and monthly status updates on tasks within the requirement.
Provide monthly funding updates for requirements.
Review deliverables for correct format, spelling, grammar, comprehensibility, working links, and completeness.
Conduct semi-annual reviews and updates of documents within the role’s purview.
Use standard applications including MS Word, PowerPoint, Excel, MS Visio, and Adobe Pro.
Meet expectations to obtain a recommendation for authorization from the Security Compliance Assessor (SCA) from the DISA Risk Executive Office.
Maintain a DoDNET-accessible repository for tracking draft and signed document copies.
Update DoD, DISA, and JITC repositories and databases.
Coordinate with the Government to collect drawings, SOPs, STIG checklists, ACAS reports, POA&M updates, PPSM updates, briefings, and other artifacts.
Conduct physical location and system reviews, including reviews for systems requesting permission to operate or connect to JITC infrastructure.
Continually review assets using tools such as STIG checklists and ACAS data to ensure completeness and maintain eMASS records.
Analyze information security systems and applications and recommend and develop effective security measures.
Identify, report, and resolve security violations.
Evaluate IT infrastructure risks and establish controls to mitigate loss.
Recommend improvements to risk management controls and implementation of system changes or upgrades.
Work with end users to determine needs, implement policies and procedures, and track organizational compliance.
Establish, plan, and administer policies, goals, and procedures for the information security function.
Implement network security policies and procedures, ensure secure network access, and protect against unauthorized access, modification, or destruction.