Jr Cyber Security Eng

Govcio LLC•San Antonio, TX

7d•Onsite

About The Position

GovCIO is currently hiring for a Jr Cyber Security Engineer in support of the Air Force SCI network. This position will be located in San Antonio TX and will be an on-site position.

Requirements

High School with 6 - 9 years (or commensurate experience)
Current TS/SCI Clearance
Current ITAM Level 2 Cert
Strong understanding of RMF workflow tools like eMASS or Xacta
Knowledge of programs working within AF SCI network rules and guides
Experience with network management tools, network engineering principles, network analysis
Expert understanding of A&A process
Possess an expert understanding of current computer security requirement and compliance
Expert ability to maintain System Security and Risk Mitigation plans
Excellent written/verbal communications skills

Nice To Haves

Uses encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research.
Prepares security reports for government agencies.
Current tool sets are: Directory Resource Administration (DRA), Automated Compliance Assessment Solution (ACAS), System Center Configuration Manager (SCCM), Tanium, Host Base Security System (HBSS) and Service Now.
Tools shall include, but are not limited to: Security Log Management, Account Management, Asset Management, Vulnerability Management, End Point Security, and any related network security tools.
The current toolset used is XACTA.
The contractor shall follow all applicable ICD and National Institute of Standards and Technology (NIST) guidance in performing day-to-day duties.

Responsibilities

Conducts risk assessments and provides recommendations for application design.
Correlates threat data from various sources to establish the identity and modus operandi of hackers active in client's networks and posing a potential threat.
Provides the customer with assessments and reports facilitating situational awareness and understanding of current cyber threats and adversaries.
Develops cyber threat profiles based on geographic region, country, group, or individual actors.
Produces cyber threat assessments based on entity threat analysis.
May provide computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments.
Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.
Performs a wide range of computer security duties, including architectures, firewalls, electronic data traffic, and network access.
Participates in the certification and accreditation processes; performs technical vulnerability assessments of computer security.
Engages in incident reporting and response support.
Conducts ongoing monitoring of computer security requirements and compliance, maintains system security plans and risk mitigation plans.
Trains clients in proper computer security measures and prevention.
Provide support for all vulnerability and compliance scan tool applications and modules (pre-built and customized).
Develop workflows and customize, implement, and maintain the aforementioned applications.
Develop and update standard operating procedures (SOPs) and provide training on existing and new technologies to Government personnel.
Provide process and operations guides.
Provide technical support in the daily operations and evaluation of existing security tools, products, and future capabilities.
Maintain operational oversight and manage Command-level and privileged user accounts for the Enterprise using provided Enterprise tools.
Prepare for and conduct customer briefings, attend, and provide minutes on Technical Exchange Meetings (TEMs), and provide status reports on cybersecurity activities.
Develop information systems security studies and reports that address areas of information system security concerns.
Ensure cybersecurity requirements are incorporated in system development and sustainment activities.
Provide consultant services in all areas of information system security, including: physical, administrative, personnel, computer, operations, and industrial security.
Provide security documentation and reports within specified timeframes.
Monitor and report, IAW IC Directives and AF BluSCI policy, the status of security measures established by the Director of National Intelligence (DNI) and related authorizing officials that protect and defend information and information systems, web-based services, remote hosted applications, discovery, storage, operating systems, public key infrastructure (PKI), and other information technology components and applications for the Enterprise.
Maintain cybersecurity, system security, and sustainment programs.
Create, edit, and review security accreditation and authorization packages for the AF SCI Enterprise.
Adhere to the RMF process.
Input data into appropriate A&A tool.
Review logical network drawings, configurations, and control parameters to ensure they are current.
Review documentation required to certify new hardware and software systems for deployment.
Monitor and administer the vulnerability and compliance scan tool.
Review AF SCI change proposals for security, interoperability, accreditation and authorization issues or vulnerabilities.
Perform vulnerability and compliance assessments.
Conduct security tests and evaluations.
Monitor and review Information Assurance Vulnerability Alerts (IAVA) and Information Assurance Vulnerability Bulletins (IAVB).
Track and provide results to appropriate Government entity for review IAW standard operating procedures.
Monitor and report mandated Federal Information Security Management Act (FISMA) statistics for the AF SCI Enterprise.
Provide quarterly report to appropriate Government entity in accordance with IC Directives and AF SCI policy.