Cyber Lead / System Security Officer (SSO)

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Other

Clearance Level Must Be Able to Obtain:

Confidential

Public Trust/Other Required:

SSBI (T5)

Job Family:

Information Security

Job Qualifications:

Skills:

Information Technology Security, Security Policies, Vulnerability Management

Certifications:

None

Experience:

8 + years of related experience

US Citizenship Required:

No

Job Description:

Qualifications:

The ideal candidate will have at least seven (7) years of IT knowledge and demonstrated hands-on experience in cyber security engineering and operations. Experience managing a team 5-10 cyber security personnel.

You will support the security operations related to the following areas:

• Vulnerability Management – Nessus/Appscan Vulnerability Scanning and understanding of vulnerability scanning and cycle.
• Patch Management – Ivanti, Shavlik or similar patching software and understanding of patching process and cycle.
• Anti-Virus/Anti-Spam – McAfee epo, Windows Defender or similar and understanding of virus/Spyware analysis.
• Access Control and Authorization – Understanding and possible dentification and implementation of Network security and detection of rouge devices.
• Data Loss Prevention (DLP) – Symantec, O365 DLP or similar product
• Configuration Management - STIG/SCAP compliance baselines for windows, mac, Linux
• Splunk (Or Equivalent SEIM / Log Aggregation experience)
• Encryption – BitLocker or similar encryption software and understand Encryption key management.
• Cloud Security - Familiarity with FedRAMP for IaaS, PaaS, SaaS
• Experience with managing, establishing and understand Security Operation Center (SOC)
• Experienced Incident Response Team (IR/IRT) troubleshooting, root cause analysis and remediation verification.
• Knowledge of Identity Management, ICAM/IDAM and authorization, least privilege, reducing unauthorized elevated access.
• Penetration Test Response and Remediation
• DevSecOps – software development lifecycle security –scanning across the lifecycle and baking in application security for developers and containers

Required Certification: CISSP

Desired Certifications:

One or more of the following certifications strongly desired:

• Certified Information Systems Auditor (CISA)
• CCSP (Cloud Certified Security Professional ISC2)
• Certified Ethical Hacker (CEH)
• ITIL Foundations Certification v3, or ability to obtain certification within 3 months
• Technical certifications such as Cisco (CCNA, CCNP, CCIE), VMWare (VCP), Microsoft

Bachelor’s Degree in Business, Engineering, Computer Science, Information Systems, or Social Science or minimum 10 years of experience in lieu of degree

Job Responsibilities:

• Coordinates government customer’s security program with that of DHS and other Federal cyber departments and agencies
• Coordinates and leads security project implementations
• Functions as the Infrastructure IT security expert and ability to advise different team members on security matters
• Advises the system owner regarding security considerations in applications systems procurement or development, implementation, operation and maintenance, and disposal activities
• Interfaces directly with the government customer’s technical security teams to collect, integrate, interpret, and report using various tools to demonstrate risk, and advise stakeholders on a course of action
• Guides the program’s Software Assurance, Vulnerability Management, Security Operations, Prevention and Maintenance support
• Provides guidance to the Event Detection and Incident Response efforts through policy development and identification of weaknesses in the program
• Supports the government customer’s business activities related to risk identification and measurement systems within various technical and usage boundaries
• Collaborates with user, infrastructure support teams and other Pivot contractors to define and measure security policy and standards across the larger government customer environment
• Works with end users, stakeholders, and support teams to define and establish this secure environment
• Inspires and fosters confidence in others with ability to effectively communicate with various customer communities to understand their needs, and provide them guidance on how to best protect them through your observa