OT Reviewer

Peraton•Annapolis Junction, MD

3d•$146,000 - $234,000•Onsite

About The Position

Peraton seeks an OT Reviewer to support PACOM J6 establish the organizational foundation for ICS/SCADA-focused cybersecurity assessments across the PACOM AOR.

Requirements

Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D. Will consider Associate+14 or HS16+ years of experience.
Cross-certified in multiple related technology areas in order to conduct reviews of network vulnerability scan, virtual infrastructure, cloud, and other related areas
Able to analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives (i.e., analysis of mitigations)
Familiar with the following areas: Boundary Security (i.e., Firewalls, Network Device Management (NDM) policies, and any boundary technology)
Familiar with Network Infrastructure (i.e., Firewalls, Routers, Switches, NDM, policies, and network infrastructure)
Familiar with Domain Name System (DNS)
Familiar with Exchange Server
Familiar with Network Vulnerability Scan
Familiar with Traditional Security
Familiar with Releasable Review
Familiar with Virtual Infrastructure and Environments
Familiar with Cross Domain Solution (CDS) (Administrative and Limited Technical Review)
Familiar with Endpoint Security Solutions
Familiar with Mobility (Wireless, Wireless Discovery, 802.11, BlackBerry Enterprise Server (BES), BlackBerry Handheld, etc.)
Familiar with Voice and Video over IP (VVOIP)
Familiar with Database (Oracle, SQL, or any other database)
Familiar with Windows Infrastructure
Familiar with UNIX Infrastructure (includes all systems based on UNIX)
Familiar with Web Review (i.e., services, servers, etc.)
Familiar with Technology not specifically assigned above using SRGs, STIGs, or best practices utilizing the most appropriate certified technology area
U.S Citizenship required
Active TS with ability to obtain/maintain SCI

Nice To Haves

CERTIFICATIONS: Security+, GSEC, Network+, GCED, CySA+ and Scrum Master.

Responsibilities

Develop OT-specific assessment criteria aligned to DISA OT STIGs
Provide expertise in current version of Vulnerability Scan Procedures Guide and any official correspondence sent via electronic transmission or verbal meetings to conduct scans.
Conduct standard internal network scans, from the premise router inward while ensure scanning of all site-managed network spaces.
Perform technical Security Readiness Reviews (SRR).
Ensure the use the appropriate technology STIG/SRG and, where applicable, the appropriate automated script or tool for that technology.
Conduct assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy.
Assist in developing EXSUMs/ Briefings/Reports.
Develop and maintain cybersecurity vulnerability review, inspection, and audit SOPs, TTPs, checklists, and guides.
Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.
Adapt DCDC's existing inspection criteria framework for OT environments
Integrate with DCDC DRSI workflows
Complete initial PACOM coordination for Government acceptance of the OT Inspection Criteria Package (Del 15) - Phase 1
Conduct assessments across AOR - Phase II