Enterprise Asset Manager

Leidos•Ashburn, VA

5d•$87,100 - $157,450•Onsite

About The Position

The Department of Homeland Security (DHS), Customs and Border Protection (CBP) Cyber Security Directorate (CSD) Security Operations Center (SOC) is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to CBP networks through monitoring, intrusion detection and protective security services to CBP information systems including local area networks/wide area networks (LAN/WAN), commercial Internet connection, public facing websites, wireless, mobile/cellular, cloud, security devices, servers and workstations. The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems, and collects, investigates, and reports any suspected and confirmed security violations. Leidos is looking for a Security Enterprise Asset Manager (EAM) to ensure that security considerations are integrated into every phase of the asset lifecycle.

Requirements

BS degree and 4 years of prior relevant experience. Additional experience or applicable certifications acceptable in lieu of degree.
Familiarity with Axonius Asset Management Tool or comparable tool.
Ability to communicate with senior executive leadership regarding matters of strategic importance to the organization.
Familiarity with the management of ITAM (Information Technology Asset Management) tools.
Proficiency with Microsoft Office Applications (Word, Excel, PowerPoint, Visio, Outlook).
Experience generating presentation-quality reports.
Familiarity with IT hardware identification and handling.
Ability to lift and handle IT equipment as part of inventory activities.
Experience with IT assets sanitization and disposal practices.
Strong organizational, time management and verbal/written communication skills.
Must have a Secret Clearance.
Must be able to report to the Ashburn VA office up to 5 days per week.
Must be able to pass the CBP Background Investigation prior to start.

Nice To Haves

Experience with automated reporting from Microsoft Configuration Manager and network system scans.
Experience with Microsoft Power BI.
Process development and integration with Enterprise applications such as SharePoint and SQL Database Applications.
Familiarity with ITIL best practices for asset management.
Knowledge of FISMA, the NIST Cybersecurity framework and federal cybersecurity requirements.

Responsibilities

Assist CBP CSD to establish, implement, and continuously operate a cybersecurity focused (EAM) program encompassing the full lifecycle management and reporting of all hardware, software, services, and data assets across on-premise, cloud, and hybrid environments from acquisition and deployment to maintenance, retirement, and secure disposal.
Develop, implement, and maintain a comprehensive and accurate inventory of all hardware, software, services, and data assets within the organization.
Establish and execute continuous asset discovery processes on both on-premise and cloud based assets.
Document asset ownership, location, network connectivity, and interdependencies.
Define and apply a robust asset classification scheme based on criticality, sensitivity, business value, and potential impact on organizational objectives if compromised.
Prioritize assets for security controls and resource allocation according to their classification and risk profile.
Ensure identified vulnerabilities are accurately mapped to specific assets and tracked for remediation.
Oversee the secure configuration of assets, ensuring adherence and report any deviations of the established security baselines and industry best practices.
Support the integration of comprehensive asset management data into the overall Information Security Risk Management (ISRM) process to identify, assess, and treat risks associated with IT assets, informing risk mitigation strategies.
Drive automation initiatives to improve the efficiency, accuracy, and scalability of asset management processes by evaluating tools and technologies for automated asset discovery, inventory management, and configuration monitoring.