Principal Technician (Cybersecurity)

DEFTEC Corporation•Chesapeake, VA

6d•Onsite

About The Position

DEFTEC Corporation is seeking a Principal Technician (Cyber Security) to support cyber security operations for the NATO Communications and Information Agency (NCIA). This position is located in Norfolk, VA and is on-site, with occasional travel to other NATO locations. The Principal Technician serves as the primary point of contact for endpoint security management, firewall and network monitoring solutions, and vulnerability scan operations, and supports accreditation activities, cyber incident investigations, and the execution of NATO IT security policies. This role demands a hands-on practitioner who can own the vulnerability management cycle end to end, operate independently as an embedded technical advisor within a NATO cyber team, and communicate clearly with both technical teams and non-technical stakeholders.

Requirements

Active NATO SECRET security clearance; must be able to work on-site in Norfolk, VA
Secondary educational qualification with 3 years post-related experience
At least 4 years practical experience of implementation and maintenance of cyber security systems within a large organization
Working experience administering and monitoring cyber security software, including enterprise vulnerability scanning and endpoint protection platforms (or equivalent)
Detailed knowledge and working experience of security and networking technologies including IPv4, Firewalls, Virtual Private Networks, Proxy Servers, Intrusion Detection, and Forensic tools
Working experience troubleshooting technical issues and providing technical support to end-users
Good understanding of cyber security systems and the ability to work independently to solve problems as an embedded contractor within a government or military team
Strong written and oral communication skills; ability to coordinate across technical and non-technical teams and report status to senior management

Nice To Haves

Security Professional certification (CEH, GIAC, ISC2, CompTIA Security+, or other relevant certification)
Knowledge of NATO responsibilities and organization, including ACO and ACT
Prior experience working in an international environment comprising both military and civilian elements
Experience supporting PKI/certificate services and system accreditation processes

Responsibilities

Conduct vulnerability assessments using automated and semi-automated tools, and manage identified vulnerabilities through remediation and closure across supported networks
Administer and monitor endpoint protection services across multiple security domains
Manage access controls for firewalls and endpoint security solutions, including firewall rule changes in support of operational requirements
Support security certificate services in accordance with NATO PKI requirements
Define and maintain secure system configurations in compliance with intended architectures, organizational policy, and local risk assessments
Support accreditation activities, making routine accreditation decisions and escalating decisions beyond scope and responsibility level
Review and perform risk assessments and risk treatment plans, and maintain integrity of records to support and justify decisions
Support investigations of suspected attacks and security breaches, including cyber incident handling and root cause analysis
Conduct internal audits and reviews of cyber hygiene and security service delivery for the Agency and supported customers
Coordinate user access and maintain security checklists and authorization tables
Carry out routine operational procedures, including execution of specified automation tools and scripts, and monitor and report on infrastructure performance
Execute NATO IT security policies and standards, and generate status reports for senior management on their implementation
Prepare and submit monthly status reports documenting activities, hours by service area, and outcomes
Attend meetings as a technical advisor, working in partnership with stakeholders across supported teams to deliver services with minimal impact to business functions
Perform other duties as required