CYBERSECURITY SUBJECT MATTER EXPERT - LEAD

CGI Group Inc.•Fort Belvoir, VA

53d

About The Position

We are seeking a highly skilled Cybersecurity Subject Matter Expert - Lead to provide expert support, research, and analysis for exceptionally complex cybersecurity challenges. This key role involves serving as a technical expert for the Cybersecurity Assessment Program, offering innovative solutions and technical direction. The ideal candidate will possess advanced technical knowledge, exceptional communication skills, and a proven track record in vulnerability assessment and penetration testing. With expertise in cybersecurity software tools and development of product-specific STIGs, you will work independently towards long-range goals, guiding advanced technological ideas to fruition. If you are a strategic thinker with a deep understanding of DoD security regulations and a commitment to excellence, we invite you to join our team and lead the way in cybersecurity innovation. This position is located in USA VA Fort Belvoir -- USAVAFOR1.

Requirements

Proven proficiency performing CCRI/ vulnerability assessment/ penetration testing on networks, databases, computer applications and IT frameworks.
Strong analytical and problem-solving skills for resolving security issues.
Strong skills implementing and configuring networks and networks components.
Command Cyber Readiness Inspection certification in at least one of the following areas: o Retina scan analysis o Operating Systems (Windows, Unix) o Boundary defense (network policy, router, firewall) o Internal defense (L2 switch, L3 switch) o DNS (policy, BIND/Windows) o HBSS (remote console, AV, ABM, PA, HIPS, ePO) o Traditional security (Common, Basic, NCV, SCV) o Wireless communications (BES, handhelds)
Tenable Certified NESSUS Auditor, IAM level III and IAT level II certifications
Knowledge and understanding of DOD security regulations, DISA STIGs.
Strong knowledge of SCAP
Strong knowledge of RMF
Excellent knowledge of and proficiency with: o VULNERATOR o USCYBERCOM CTO Compliance Program o Wireless vulnerability assessment o Web Services (IIS, Apache, Proxy) o Database (SQL Server, Oracle) o Email Services (Exchange) o Vulnerability Scans (NESSUS, SCCM) o Knowledge of Phishing exercises o USB Detect o Physical Security
Required to possess a DOD SECRET Clearance and be eligible for an IT-II upon assignment.
DISA FSO certified CCRI Team Lead and certification in penetration testing, such as: o Licensed Penetration Tester (LPT) o Certified Expert Penetration Tester (CEPT) o Certified Ethical Hacker (CEH) o Global Information Assurance Certification Penetration Tester (GPEN)
Seven (7) years IT experience
Five (5) years IA experience
Three (3) years of experience with DOD Vulnerability Management System
Must have ten (10) years' experience supporting DoD or Federal Oracle shared service providers on an Oracle EBS R12.2 platform or higher.
Security Clear

Responsibilities

Provides expert support, research and analysis of exceptionally complex problems, and processes relating to them.
Serves as technical expert to the Cybersecurity Assessment Program providing technical direction, interpretation, and alternatives to complex problems.
Thinks independently and demonstrates exceptional written and oral communications skills.
Applies advanced technical principles, theories, and concepts.
Contributes to the development of new principles, concepts, and methodologies.
Works on unusually complex technical problems and provides highly innovative and ingenious solutions.
Recommends cybersecurity software tools and assists in the development of software tool requirements and selection criteria to include the development of product specific STIGs from applicable DISA SRGs.
Works under consultative direction toward predetermined long-range goals and objectives.
Assignments are often self-initiated.
Determines and pursues courses of action necessary to obtain desired results.
Develops advanced technological ideas and guides their development into a final product.
Expertise is in the area of cybersecurity and evaluations.