Deputy IT Security Manager

Deputy IT Security Manager

 

Location: Falls Church, VA (Onsite)

Clearance: Secret

Classification: Exempt

 

Responsibilities:

• Propose, coordinate, implement and enforce information systems security policies, standards, and methodologies.
• Manage large, geographically dispersed, multifaceted team comprised of various cyber-security engineers; team roles include information assurance, security infrastructure engineers, and SOC analysts.
• Direct and coordinate actions for incident response, data collection, forensics, cleanup and reporting. Assess threat reports and threat intelligence to inform operational and policy decisions.
• Prioritize and manage projects in a fast-paced environment.
• Ensure timely completion of projects, on time and on schedule.
• Read and interpret STIGs, SRGs, SCAP and ACAS scan results and provide direction as necessary for audit, accreditation, project and consulting activities.
• Review vulnerability scans and approve associated mitigation strategies.
• Document strategies in Plans of Action and Milestones artifacts.
• Perform all required duties as ISSO for joint-force DoD agency network.
• Conduct and manage accreditation activities under Risk Management Framework (RMF) for multiple accreditation boundaries.
• Provide guidance and leadership to other team ISSOs.
• Lead accreditation efforts and CCRIs. Complete, test and review of RMF security controls (CCIs) as part of multiple eMASS accreditation packages.
• Develop artifacts to provide evidence, support, or policy guidance for compliance with each control as necessary.
• Conduct management and oversight of enterprise SOC team and Incident Responders. Coordinate response efforts, incident management and triage.
• Provide oversight of SOC activities, technologies, and strategic direction.
• Coordinate with division leads and directors for investigations, insider threat, and research.
• Conduct analysis and provide recommendations on policy, design, and solutions for increasing the security of the enterprise. 

 

Required Qualifications: 

• 3+ years of information technology experience in security engineering, operations management, and IT management. 
• 3+ years of experience managing a team of 3 or more direct reports in an enterprise IT environment. 
• Minimum of 8 year of experience in Information Technology positions. 
• Master’s degree. Bachelor’s degree can be substituted for Master’s with an additional 2 years of full-time information technology experience. High school degree can be substituted for Master’s with an additional 6 years of full-time information technology experience. 
• Excellent interpersonal, interviewing, analytical and problem solving skills to address variable situations. 
• General knowledge of DoD industry security requirements, standards, and best practices. 
• Strong written and verbal communication skills; ability to document processes and write comprehensive security recommendations. 
• Professional attitude, able to communicate and interact with individuals at all levels across various information technology and business sectors. 
• Strong organizational, project management, and customer service skills. Ability to act in the best interest of the client both within a team and self-directed. 

 

Preferred Qualifications: 

• 3+ years of experience in DOD/military IT environment; experience reading and interpreting TASKORDs and OPORDs. 
• 3+ years of experience in an ISSO position working with Assured Compliance Assessment Solution (ACAS) or similar vulnerability scanning tools; Patch management and compliance; eMASS or similar tool; performing C&A, A&A, Validator or SCA responsibilities; developing POA&Ms and documentation; vulnerability mitigation. 
• 3+ years of experience working in a SOC environment; conduct in-depth continuous monitoring; tuning of security devices and management of alerts; administration of HBSS tools; network defense and security event triage. 
• ISSO/ISSM experience on a network enclave 

 

Required Certifications: 

• CISSP or DoD 8570 IAT III and IAT III level certifications or DoD 8140 Intermediate level qualification (541), such as SecurityX / CASP+ 

 

Preferred Certifications: 

• GIAC GSEC, GCIA, GISF, GCED, GCWN, GPPA, GMON, GCUX, GCCC, ISC2 CCFP, CCSP, SSCP, CSSLP, HCISPP, PMP, ITIL 

 

About Us

IntelliDyne, LLC empowers government organizations through the delivery of quality, mission-aligned ser