Lead, Cyber Intelligence - TS/SCI

L3HHCM20•Washington, DC

2d•Onsite

About The Position

The candidate will be able to perform cybersecurity analysis, engineering, and Information System Security Officer (ISSO) duties under the guidance of the Cyber Division’s Information System Security Manager (ISSM). The candidate must have an excellent working knowledge of cybersecurity best practices and experience with cybersecurity operations within Amazon Web Services (AWS). Responsibilities will include authoring and maintaining documentation supporting the management of the system; performing security control assessments as part of the systems’ Continuous Monitoring Plan; overseeing configuration management of assigned systems; working to develop and implement device and system hardening guides following DISA and NIST guidelines; auditing systems to ensure security posture integrity; conducting periodic hardware/software inventory assessments; identifying system security controls shortcomings and developing POA&Ms; remediating control deficiencies; conducting, documenting and reporting annual self-assessments; maintaining operational information security posture for all systems; investigating security incidents such as data spills and malicious events; authoring and delivering security education and training to a range of audiences. This role will also serve as the Washington DC site Facility Security Officer (FSO) with managing secure space on-site as-assigned.

Requirements

Bachelor’s Degree and minimum 9 years of prior relevant experience. Graduate Degree and a minimum of 7 years of prior related experience. In lieu of a degree, minimum of 13 years of prior related experience.

Nice To Haves

Willingness to submit to a polygraph if required
Active Top Secret/SCI security clearance
Active DoD 8140 certification (e.g. Certified Information System Security Professional (CISSP) or equivalent certification
8 years of prior relevant experience to include experience with networking equipment; experience interpreting vulnerability scanning results (e.g. Nessus, Rapid7, etc.); experience reviewing workstation, server, firewall, & IPS logs; experience with SIEM tools
Experience managing cybersecurity in large wide area networks and in cloud environments
Experience developing, managing, and providing evidence to close findings associated with the cybersecurity authorization and project management processes
Experience with workstation and server operating systems, including but not limited to Microsoft and Linux offerings
Experience managing and/or leading global teams
Experience managing site and/or physical security requirements in the US

Responsibilities

Perform security control assessments and develop a Continuous Monitoring Plan
Work with system administration and architecture teams to develop device and system hardening policies and procedures following DISA, NIST, and various industry best practice guidelines
Maintain system patching compliance along with maintaining hardware and software baselines
Responsible for leading the deployment of several security tools, including but not limited to IDS/IPS, encryption solutions, endpoint protections, SIEM tools, user behavior analytics, and micro network segmentation
Working with IT to lay the groundwork for a zero-trust architecture and the integration of cloud and on-prem solutions
Ensure all systems are comprehensively monitored for anomalous activity and unauthorized exfiltration attempts
Manage the incident response process for your area of responsibility
Develop new concepts, standards, and training material which make significant and impactful improvements to processes, systems, solutions, or products
Lead inventory and asset management discovery and tracking activities
Author and maintain Assessment & Authorization (A&A) documentation of assigned systems
Work with security and program leadership to improve the security posture of systems, processes, and general efficiencies
Manage security protocol, posture, and requirements for Washington DC site, serving as primary contact for physical security (alarm monitoring, badging, and intrusion detection systems)
Flexibility to adjust to changing requirements, schedules, and priorities