Intermediate Information Security Specialist

Chenega Corporation•Arlington, Virginia

1d•Onsite

About The Position

Under general supervision, the Intermediate Information Security Specialist uses current information security technology disciplines and practices to protect the confidentiality, integrity, and availability of corporate information assets in accordance with established standards and procedures. The position provides cybersecurity and information security support to the Army Intelligence Enterprise, including Risk Management Framework assessment and authorization, security compliance, incident response, policy and documentation, training, and access coordination. The role is based at the Pentagon in Arlington, Virginia.

Requirements

Bachelor of Arts or Bachelor of Science.
At least 5 years of experience in protected information environments, such as SIPR, SAP, or JWICS.
IAM Level II in accordance with DoD 8570.01-M.
Active TS/SCI clearance.
Successfully pass background and drug screening.
Knowledge of ICD 503 and the Government's assessment and authorization process.
Practical knowledge and application of the Enterprise Mission Assurance Support Service (eMASS) information system assessment and authorization tool.

Nice To Haves

ISC(2) Certified in Governance, Risk and Compliance (CGRC) or comparable industry certification.
Experience working within the Army and/or Intelligence Community.

Responsibilities

Maintain knowledge of changing regulatory, threat, and technology landscapes and develop or maintain security policies and standards to support organizational compliance.
Provide technical support to the Army Intelligence Enterprise by identifying cybersecurity requirements and specifications in accordance with Intelligence Community directives and standards; participate in staff assistance visits, gather data, perform technical analysis, document requirements, evaluate new technologies, and analyze customer needs.
Assess Army Intelligence Enterprise information needs and develop required documentation.
Research and analyze Army Intelligence IT topics, develop alternatives, and formulate recommendations for senior government leadership approval.
Support the Authorizing Official and Program-Information Systems Security Manager with Risk Management Framework assessment and authorization efforts for the Army Intelligence Enterprise.
Review RMF security packages, identify security issues, assess compliance with applicable ICD 503 requirements, and recommend whether residual system risk is acceptable to the Government.
Provide input on Army Intelligence Enterprise modernization efforts, including Continuous Monitoring and Common Standardization.
Provide subject matter expertise on mission command and Army Intelligence Enterprise support and participate in weekly working groups and bi-weekly councils.
Investigate and analyze cybersecurity incident response activities; coordinate sanitization and reporting; triage incidents; and track and document them through resolution.
Maintain cybersecurity documentation by collecting, consolidating, and generating data and drafting documents in accordance with applicable DoD, Army, and Intelligence Community guidance and best practices.
Facilitate senior government leadership review and approval of updated or modified documents and maintain document configuration control.
Schedule and conduct introductory and remedial cybersecurity and information assurance awareness training for contractor, government, and military personnel with access to ODCS, G-2 networks.
Update ODCS, G-2 training materials to reflect policy changes, review them annually with the ISSM, and submit revisions for approval before publication.
Keep employee training status records current in the Army Training and Army Training Certification Tracking System replacement.
Manage or coordinate ATCTS records for G-2 information system account holders in accordance with AR 25-2 and local requirements.
Coordinate information system access with the Help Desk and relevant points of contact, and process DD Form 2875 access requests for approval across applicable domains.
Assist the ISSM or conduct physical inspections of Automated Information Systems ready for end-of-life disposal, coordinating with the hardware team and following the ODCS, G-2 Security SOP.
Review ODCS, G-2 network and system configurations quarterly to ensure they can capture data required by DoD, Army, and Intelligence Community directives and standards.
Review operating systems, Active Directory, databases, hardware architecture, network devices, folder structures, and applications for security compliance.
Review and execute system configuration guidance and compliance checklists using STIGViewer and applicable DISA Security Technical Implementation Guides or Security Requirements Guides.
Manage the G-2 Army Data Auditing Management program, including training and tracking Observer, Operator, Custodian, and Approver roles; serve as Removable Media Custodian; and maintain removable media transfer documentation.
Perform other duties as assigned.