Intermediate Information Security Specialist

Chenega Systems • Arlington, VA

1d • $81,700 - $109,000 • Onsite

About The Position

Chenega Systems, part of Chenega Military, Intelligence & Operations Support (MIOS), provides cybersecurity and data visualization solutions to federal agencies. Under general supervision, the Intermediate Information Security Specialist applies information security disciplines and practices to help ensure the confidentiality, integrity, and availability of corporate information assets in accordance with established standards and procedures. The role supports the Army Intelligence Enterprise and its cybersecurity requirements, including Risk Management Framework (RMF) assessment and authorization, information security compliance, incident response, security documentation, employee training, system access coordination, configuration reviews, and data auditing. The position is based in Arlington, Virginia, at the Pentagon.

Requirements

• Bachelor of Arts or Bachelor of Science degree.
• At least 5 years of experience in protected information environments, such as SIPR, SAP, or JWICS.
• IAM Level II certification in accordance with DoD 8570.01-M.
• Active TS/SCI clearance.
• Successfully pass background and drug screening.
• Knowledge of ICD 503 and the Government's assessment and authorization process.
• Practical knowledge and application of the eMASS information system assessment and authorization tool.

Nice To Haves

• ISC(2) Certified in Governance, Risk and Compliance (CGRC) or comparable industry certification.
• Experience working within the Army and/or Intelligence Community.

Responsibilities

• Maintain knowledge of changing regulatory, threat, and technology landscapes to develop or maintain security policies and standards and support organizational compliance.
• Provide technical support to the Army Intelligence Enterprise by identifying cybersecurity requirements and specifications in accordance with Intelligence Community directives and standards; participate in staff assistance visits, gather data, perform technical analysis, document requirements, assess new technologies, and analyze customer requirements.
• Assess Army Intelligence Enterprise information needs and develop required documents.
• Conduct independent research, analyze data, develop alternatives, and recommend solutions on Army Intelligence IT topics for senior government leadership consideration.
• Support the Authorizing Official and Program-Information Systems Security Manager with RMF assessment and authorization efforts for the Army Intelligence Enterprise.
• Review RMF security packages, identify security issues, assess systems against applicable ICD 503 requirements, and recommend whether residual risk is acceptable to the Government.
• Provide input on Army Intelligence Enterprise modernization efforts, including Continuous Monitoring and Common Standardization.
• Provide subject matter expertise on mission command and Army Intelligence Enterprise support, including participating in weekly working groups and biweekly councils.
• Investigate and analyze cybersecurity incident response activities; coordinate sanitization and reporting; triage incidents to determine scope, urgency, and potential impact; and track incidents through resolution.
• Maintain cybersecurity documentation by collecting, consolidating, or generating required data and drafting documents in accordance with applicable DoD, Army, and Intelligence Community guidance and best practices.
• Facilitate senior government leadership review and approval of updated or modified documents and maintain document configuration control.
• Schedule and conduct initial and remedial cybersecurity and information assurance awareness training for contractor, government, and military personnel with access to ODCS, G-2 networks, in accordance with guidance and the applicable SOP.
• Maintain and update ODCS, G-2 training materials to reflect policy changes; review the materials annually with the ISSM and submit revisions for approval before publication.
• Keep ODCS, G-2 employee training records current in the Army Training and Army Training Certification Tracking System replacement.
• Manage or coordinate ATCTS unit records for G-2 information system account holders in accordance with AR 25-2 and local requirements.
• Coordinate information system access with the Help Desk and relevant points of contact, and process DD Form 2875 requests to determine eligibility for access across applicable domains.
• Assist the ISSM with, or conduct, physical inspections of automated information systems designated for end-of-life disposal, coordinating with the hardware team and following applicable procedures.
• Review ODCS, G-2 network and system configurations quarterly to verify they can capture data required by applicable DoD, Army, and Intelligence Community directives and standards.
• Review operating systems, Active Directory, databases, hardware architecture, network devices, folder structures, and applications for security compliance.
• Review and execute system configuration guidance and compliance checklists under ISSM instructions, using STIGViewer to assess compliance against applicable DISA STIGs or SRGs.
• Manage the G-2 Army Data Auditing Management program, including training and tracking Observer, Operator, Custodian, and Approver roles; serve as Removable Media Custodian; and maintain removable media transfer documentation.
• Perform other duties as assigned.

Benefits

• Professional development opportunities, including on-the-job learning and formal development programs.
• A broad range of employee benefits.
• Well-being programs and flexibility to make daily choices that support health and well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level