Intermediate Information Security Specialist

Chenega Corp • Arlington, VA

1d • Onsite

About The Position

The Intermediate Information Security Specialist works under general supervision to protect the confidentiality, integrity, and availability of corporate information assets in accordance with established standards and procedures. The role supports the Army Intelligence Enterprise and applies current information security practices across the Department of Defense and Intelligence Community environments. The position is based in Arlington, Virginia, at the Pentagon.

The specialist supports Risk Management Framework assessment and authorization efforts, reviews security packages and system configurations, analyzes security risks, and provides recommendations to government leadership. The role also supports cybersecurity incident response, documentation and configuration control, employee training and access coordination, system inspections and compliance reviews, and management of the G-2 Army Data Auditing Management program.

Requirements

• Bachelor of Arts or Bachelor of Science degree.
• At least five years of experience in protected information environments, such as SIPR, SAP, or JWICS.
• IAM Level II certification in accordance with DoD 8570.01-M.
• Active TS/SCI clearance.
• Successfully pass background and drug screening.
• Knowledge of and experience with ICD 503 and the Government's assessment and authorization process.
• Practical knowledge and application of the Enterprise Mission Assurance Support Service (eMASS) information system assessment and authorization tool.

Nice To Haves

• ISC(2) Certified in Governance, Risk and Compliance (CGRC) or comparable industry certification.
• Experience working within the Army and/or Intelligence Community.

Responsibilities

• Develop and maintain knowledge of changing regulatory, threat, and technology landscapes to develop or maintain security policies and standards and support organizational compliance.
• Provide technical support to the Army Intelligence Enterprise by identifying cybersecurity requirements, participating in staff assistance visits, gathering data, conducting technical analysis, documenting requirements, assessing new technology feasibility, and analyzing customer requirements.
• Assess Army Intelligence Enterprise information needs and develop required documentation.
• Conduct independent research and data analysis, develop alternatives, and formulate recommendations for senior government leadership on Army Intelligence IT topics within the DoD and Intelligence Community.
• Support the Authorizing Official and Program-Information Systems Security Manager with Risk Management Framework assessment and authorization efforts for the Army Intelligence Enterprise.
• Review RMF security packages, identify security issues, assess systems against applicable ICD 503 requirements, and recommend whether residual system risk is acceptable to the Government.
• Provide input on Army Intelligence Enterprise modernization efforts, including continuous monitoring and common standardization.
• Provide subject matter expertise on mission command and Army Intelligence Enterprise support, and participate in weekly working groups and bi-weekly councils.
• Investigate and analyze cybersecurity incident response activities; coordinate sanitization and reporting; conduct incident triage; and track and document incidents through resolution.
• Maintain cybersecurity documentation by collecting, consolidating, or generating required data and drafting documents in accordance with applicable DoD, Army, and Intelligence Community guidance and best practices.
• Facilitate senior government leadership review and approval of updated or modified documents and maintain document configuration control.
• Schedule and conduct introductory and remedial cybersecurity and information assurance awareness training for contractor, government, and military personnel with access to ODCS, G-2 networks.
• Maintain and update ODCS, G-2 training materials to reflect policy changes; review the materials annually with the ISSM and submit revisions for approval before publication.
• Keep ODCS, G-2 employee training records current in the Army Training and Army Training Certification Tracking System replacement, and manage or coordinate ATCTS records for G-2 information system account holders.
• Coordinate information-system access with the Help Desk and applicable points of contact, and process DD Form 2875 requests to determine access eligibility across applicable domains for approval.
• Assist the ISSM or conduct physical inspections of Automated Information Systems ready for end-of-life disposal, coordinating with the hardware team and following applicable procedures.
• Review ODCS, G-2 network and system configurations quarterly to confirm they can capture data required by DoD, Army, and Intelligence Community directives and standards.
• Review operating systems, Active Directory, databases, hardware architecture, network devices, folder structures, and applications for security compliance.
• Review and execute system configuration guidance and compliance checklists using STIGViewer and applicable DISA Security Technical Implementation Guides or Security Requirements Guides, as directed by the ISSM.
• Manage the G-2 Army Data Auditing Management program, including training and tracking Observer, Operator, Custodian, and Approver roles; serve as Removable Media Custodian; and maintain removable-media transfer documentation.
• Perform other duties as assigned.

Benefits

• Professional development opportunities, including on-the-job learning and formal development programs.
• Well-being programs.
• A broad range of benefits is offered; specific benefits are not listed.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level