HSEEP Cybersecurity/Infrastructure Protection Exercise Professional

Cybervance

About The Position

Cybervance is a rapidly growing information security and information technology company based in Washington, D.C., and we are an equal opportunity employer. Cybervance combines advanced cybersecurity expertise with proven federal contracting experience to deliver innovated, mission-focused solutions for U.S. Government agencies. We are committed to helping our partners achieve measurable improvements in security and resilience. We are seeking numerous HSEEP Cybersecurity/Infrastructure Protection Exercise professionals for multiple opportunities. Qualified candidates will possess experience using the Homeland Security Exercise and Evaluation Program (HSEEP) standards to develop, execute, and evaluate cybersecurity and/or cybersecurity infrastructure protection exercises. Candidates who have a current Fundamental and Intermediate HSEEP certification are preferred.

Requirements

2+ years’ experience with security tools and vulnerability scanning.
Scripting and automation skills (e.g., Python, PowerShell).
2 years’ experience with computer networks, operating systems (like Linux and Windows), cloud security, and security frameworks.
A bachelor's degree.
Requires 5+years of experience. Experience with a broad understanding of IT, cybersecurity, risk management, and computer and network systems.
3+ years of experience.
Knowledge of policies and procedures and production experience in complex environments.
3+ years’ experience.
Proven production experience in understanding cybersecurity frameworks, familiarity with SIEM tools, knowledge of network protocols and infrastructures, ability to analyze logs for irregularities, basic scripting or coding for task automation, threat intelligence analysis, and incident response.
4+ years’ experience.
A bachelor's degree in a related field, significant experience in information security (especially cloud security), and proficiency in major cloud platforms like AWS, Azure, or GCP.
2+ years’ experience.
A bachelor’s degree in computer science or cybersecurity.
1 year of experience in a related security role.
3+ years of experience in vulnerability management, information security, or a related field.
1 year in a large-scale IT environment.
A bachelor’s degree in information security, IT, marketing, communication, or a related field.
2+ years of experience.
4+ years’ experience.
Previous experience as a security analyst.
Some roles may require 3+ years of cybersecurity experience.
Prior experience in information security, programming, or a related IT field.
5+ years of experience specifically in malware analysis.
A bachelor's degree in computer science, cybersecurity, or a related field.
3+ years of experience in IT or cybersecurity.
A bachelor's degree in computer science, cybersecurity, information technology, or a related field.
7+ years’ experience in security leadership role.
Proven leadership and team management experience.
A bachelor's degree in computer science, information technology, or a related field.
2+ years security experience with focus on auditing and management aspects of cyber security asset management.
2+2 years’ experience.
A master's degree and 3+years’ experience.
Proven experience leading teams that are operational and dedicated to cyber security.
A bachelor’s degree.
5+ years’ experience.
A bachelor’s degree.
2+ years’ experience in information technology and a focus on networking, intrusion detection and packet level inspection.
2+ years’ experience designing and deploying applications.
Use of programming languages.
Experience as a threat hunter and/or intrusion detection/SOC analyst.
A bachelor’s degree, master’s degree or equivalent experience, with 10+ years of related work experience.
A bachelor’s degree, master’s degree or equivalent experience, with 10+ years of related work experience.
A bachelor’s degree, postgraduate work, or equivalent experience, with 5-10 years of related work experience.
A bachelor’s degree, post-graduate work, or equivalent experience, with 5 or more years of related work experience.
A bachelor’s degree or equivalent industry experience, with 3-5 years of related work experience.
A bachelor’s degree or equivalent experience, with 1-2 years of related work experience.
A bachelor’s degree or equivalent experience.
An associates degree or equivalent experience (5 years of related work experience).

Nice To Haves

Current Fundamental and Intermediate HSEEP certification are preferred.
Certifications such as CompTIA Cybersecurity Analyst (CySA+) and CISSP.
Certifications in Pen Testing and EC Council's Certified Ethical Hacker (CEH).
Professional certifications. Certified Computer Examiner (CCE), GIAC Certified Forensic Examiner (GCFE), and CompTIA Security+.
Relevant certifications like CompTIA Security+, Certified Ethical Hacker (CEH).

Responsibilities

Manages cyber threats by monitoring, analyzing, and responding to security incidents.
Designs, implements, and manages security controls and systems to protect an organization's infrastructure.
Designs and implements overall security strategies and architectures for an organization.
Manages and maintains security systems and access controls.
Monitors networks and systems for malicious activity, often working within a Security Operations Center (SOC).
Focuses on securing cloud environments and data.
Responds to and manages security incidents, minimizing damage and restoring systems.
Identifies and assesses vulnerabilities in systems and applications.
Develops and delivers security awareness training to employees.
Simulates cyberattacks to identify vulnerabilities in systems and applications.
Actively searches for threats and vulnerabilities within a network.
Analyzes malware to understand its behavior and how to defend against it.
Focuses on securing software applications.
Leads the overall cybersecurity strategy and operations of an organization.
Provides expert advice and guidance on cybersecurity best practices and asset management.
Investigates cybercrimes and gathers evidence.
Manages teams of cybersecurity professionals.
Conducts research on new cybersecurity threats and technologies.
Develops secure software applications.
Provides subject area expertise, guidance and expert technical analyses, and advice in specific technical areas to support management, organizational, and business decisions for clients.
Participates in meetings, task groups, teams, reviews, and other environments to assist in collaborative results.
Prepares reports, presentations, and papers to document findings, opinions, and recommendations.
Supervises teams in accomplishing tasks and trains subordinate technical staff in the technical aspects of assigned work.
Makes authoritative decisions and recommendations having a significant impact on processes and strategic plans.
Negotiates critical and sometimes controversial issues with industry counterparts in other organizations.
Displays a high degree of project management expertise and program oversight experience.
Responsible for the day-to-day operations of the engagement including contractual/business aspects.
Provides assistance to the Project Executive; enforcement of the contract provisions; serving as the primary point of contact for Contract communications; maintaining appropriate staffing levels; implementation of quality assurance and control measures; review of daily activity; review and submittal of invoices; and overall management and oversight of action planning and process improvements.
Applies diversified knowledge of consulting and emergency planning practices to a broad variety of assignments and related fields.
Make decisions independently regarding strategic and action planning complexities and methods.
Independently evaluates, selects, and applies standard planning, analytical, or scientific techniques and procedures.
Performs standard analytical work requiring the application of standard techniques and procedures.
Provides a wide array of routine analytical tasks to Supervisory staff.
Assistants are responsible for a wide array of administrative duties including, but not limited to, the following: maintaining product records, project filing, word processing, document proofing, project communications and correspondence, and assisting the Project Manager with miscellaneous administrative and clerical tasks.