Cybersecurity Administrator

QED Systems•Virginia Beach, VA

4d•Onsite

About The Position

The Cybersecurity Administrator is responsible for implementing and maintaining the security controls required for CMMC (Cybersecurity Maturity Model Certification) Level 2 across the enterprise, in accordance with NIST SP 800-171, Protecting Controlled Unclassified Information. The administrator will maintain and improve the organization’s System Security Plan (SSP) and Plan of Action and Milestones (POA&M), support assessment readiness with the company’s C3PAO and DIBCAC, and help sustain the security of Controlled Unclassified Information (CUI). The Cybersecurity Administrator shall have experience with boundary defense techniques, commercial off-the-shelf (COTS) security products, and cloud services used to meet the enterprise’s system security objectives.

Requirements

Experience implementing controls to meet NIST SP 800-171 requirements
Experience designing and maintaining a System Security Plan (SSP)
Experience performing security audits with and without specialized SIEM tools
Experience certifying or validating compliance of information systems
Current certification compatible with IAT Level III in accordance with DoD 8140 (formerly DoD 8570.01-M), or the ability to obtain one within six months of hire
Comprehensive understanding of computer security and the ability to communicate clearly and succinctly in written and oral presentations
Working knowledge of a vulnerability management system
Experience utilizing MS Purview and Data Loss Prevention (DLP) policies
Experience securing cloud-based security controls
Requires U.S. citizenship and the ability to obtain a DoD Secret clearance.

Nice To Haves

Current ISC2 CISSP certification
Experience developing and testing an Incident Response Plan
Mobile Device Management (MDM) administration
Experience with network administration
Experience with system administration
Experience implementing or managing FedRAMP-authorized vendor products (e.g., GCC High)
Experience in a classified environment

Responsibilities

Plan, develop, implement, test, and document security controls to meet CMMC Level 2 (NIST SP 800-171) requirements
Develop and enforce information security policy
Perform IT risk and security assessments and support risk mitigation efforts
Assess flow-down of DFARS requirements to subcontractors and support vendor/supply-chain risk reviews
Develop approaches to mitigate vulnerabilities and recommend changes to systems or components as needed
Facilitate an IT business continuity plan
Perform internal security control assessments and self-assessments, including SPRS scoring support
Identify information protection needs for the computing and network environments
Develop, maintain, and analyze the System Security Plan (SSP) and associated cybersecurity risk analysis
Advise network, system, and software engineers on the results of cybersecurity risk analysis
Execute and support network security initiatives
Conduct vulnerability scanning
Ensure patch compliance
Support incident response and remediation efforts
Participate in assessment activities, including interviews, documentation requests, and artifact requests
Review responses and deliverables for accuracy and assist with interpreting assessment requests
Review assessment findings and assist management in developing responses and remediation plans
Create, track, and provide status updates on Plan of Action and Milestones (POA&M) items
Develop, update, and maintain metric/KPI status reports on a defined schedule for IT initiatives
Respond to requests for clarification and information
Oversee and provide technical guidance to Cybersecurity Analysts