Cybersecurity Specialist 2

Essnova Solutions, Inc.•Offutt Air Force Base, NE

About The Position

Provide cybersecurity support for NAAS, owned and maintained by 55 SCS, but utilized by NAOC and 55 WG Command Post in support of NAOC and STRATCOM Alert Aircrew Mission. More commonly known as Klaxon, the system provides modern network-based non-hardened communications and notification capabilities to support aircrews at Offutt AFB. Support the 55th Strategic Communications Squadron in other cybersecurity related matters. The cybersecurity Subject Matter Experts (SME) shall serve as primary advisors, ensuring appropriate operational security posture for organizational mission and NC3 systems. Essential Job Function Provide cybersecurity support for building an initial RMF package to support the ATO for the ground element of the AFGSC Global Aircrew Strategic Network Terminal (G-ASNT) for the 55 SCS and 55 WG (Command Post). · Develop technical solutions that require collaboration with the G-ASNT Program Management Office (PMO) and internal experts for deep analyses and understanding of impacts on end- products and solutions. · Help resolve technical problems and mitigate programmatic issues that are unclear and require extensive technical knowledge. · Serve as the principal advisor for Offutt AFB G-ASNT customers, ensuring appropriate operational security posture for organizational mission and business systems per the G-ASNT PMO. · Advise on all matters involving RMF, A&A, and day-to-day security of NC3 mission systems. · Manage and document A&A projects to provide inputs to the G-ASNT PMO for submission in the eMASS A&A workflow platform, or other platform, as dictated by the PMO. · Document and track controls and artifacts using Microsoft Excel and other software products. · Develop, review, and update Risk Management Framework Plan and supporting documentation to comply with NIST SP 800-53 requirements in support of the ATO. · Advise, conduct, and document risk assessments, develop SSP, POAMs, and security policies and procedures. · Conduct audits on G-ASNT system. · Advise and guide customers in the implementation of security controls, doctrine, and policies. · Implement cybersecurity standards and procedures to identify, report and resolve security violations. · Establish and satisfy cybersecurity and security requirements based upon user, policy, regulatory, PMO, and resource demands.

Requirements

Associate of Science Degree in Information Technology or Cybersecurity.
Possess Intermediate Level Cybersecurity Work Role experience
IAW DoDM 8140.03 Certifications (one of each)
Baseline/Entry: CompTIA Security+.
Advanced/Management: ISC2 certifications like CISSP, CCSP, or ISSMP.
Technical/Specialized: EC-Council (CEH, CHFI), GIAC, or Cisco certifications.
TS/SCI clearance, obtain SCI caveat, NC2-ESI, within three (3) months after contract award.

Responsibilities

Develop technical solutions that require collaboration with the G-ASNT Program Management Office (PMO) and internal experts for deep analyses and understanding of impacts on end-products and solutions.
Help resolve technical problems and mitigate programmatic issues that are unclear and require extensive technical knowledge.
Serve as the principal advisor for Offutt AFB G-ASNT customers, ensuring appropriate operational security posture for organizational mission and business systems per the G-ASNT PMO.
Advise on all matters involving RMF, A&A, and day-to-day security of NC3 mission systems.
Manage and document A&A projects to provide inputs to the G-ASNT PMO for submission in the eMASS A&A workflow platform, or other platform, as dictated by the PMO.
Document and track controls and artifacts using Microsoft Excel and other software products.
Develop, review, and update Risk Management Framework Plan and supporting documentation to comply with NIST SP 800-53 requirements in support of the ATO.
Advise, conduct, and document risk assessments, develop SSP, POAMs, and security policies and procedures.
Conduct audits on G-ASNT system.
Advise and guide customers in the implementation of security controls, doctrine, and policies.
Implement cybersecurity standards and procedures to identify, report and resolve security violations.
Establish and satisfy cybersecurity and security requirements based upon user, policy, regulatory, PMO, and resource demands.