Cybersecurity CORA/CHAT Technician - Journeyman

Position Summary

ECS is seeking a Cybersecurity CORA/CHAT Technician - Journeyman to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. In this role, the technician supports Task 3 — Cybersecurity Operations Support by executing Cyber Operational Readiness Assessment (CORA) and Cyber Hygiene Assessment Team (CHAT) activities across supported enterprise environments. The position performs vulnerability scanning, configuration compliance checks, security control validation, evidence collection, findings documentation, remediation tracking, and follow-up validation under senior direction to help deliver ENOCS cybersecurity assessment, compliance, and continuous monitoring objectives. This role works as part of the broader cybersecurity operations team that supports Defensive Cyberspace Operations – Internal Defensive Measures (DCO-IDM) across the DoDIN-Army-NG area of responsibility.

 

Please Note: This position is contingent upon contract award.

 

This position contributes directly to ARNG’s mission to sustain secure operations for more than 120,000 users and approximately 141,000 endpoints across about 2,800 sites in 54 states and territories, including support to Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and classified and unclassified network environments. The technician supports assessment and compliance activities aligned to ARNG’s enterprise cyber environment, including RMF processes, eMASS updates and integration, secure baseline configuration efforts, and continuous compliance validation across systems and services operating within NIPRNet and SIPRNet-connected mission environments. The role also supports cybersecurity coordination performed in concert with the NETCOM Global Cyber Center and DISA DCDC to help maintain audit readiness and strengthen the ARNG enterprise security posture.

Responsibilities

• Execute CORA and CHAT assessment activities by performing vulnerability scans, configuration compliance checks, and security control validation tasks across supported enterprise environments.
• Collect, organize, and maintain assessment evidence, artifacts, and supporting documentation using approved formats for inspections, audits, and cybersecurity reviews.
• Document vulnerabilities, compliance gaps, and security findings accurately, and track remediation actions and POA&Ms to closure under senior guidance.
• Perform follow-up validation of corrective actions to confirm remediation effectiveness and support continuous compliance validation across ARNG systems and services.
• Support inspection and audit readiness efforts aligned with DoD and ARNG cybersecurity policy, RMF requirements, and continuous monitoring objectives.
• Assist with eMASS update and integration activities by preparing and organizing assessment evidence, findings, and remediation status needed for ongoing authorization support.
• Contribute to secure baseline configuration and vulnerability management efforts that inform ARNG compliance management, prioritized changes, and risk posture assessments.
• Coordinate assessment-related information with cybersecurity operations personnel supporting the broader Task 3 mission, including activities performed in coordination with the NETCOM Global Cyber Center and DISA DCDC.
• Support cybersecurity assessments across classified and unclassified enterprise environments that enable ARNG operations spanning NIPRNet and SIPRNet mission requirements.

Qualifications

Required Qualifications

U.S. Citizenship is required

Security Clearance: TS//SCI Eligible

Required Certifications: DCWF Work Role 541-Vulnerability Assessment Analyst — Basic proficiency; must hold ONE OR MORE of the following: CEH

Experience: 3+ years of experience in cybersecurity

• Experience executing vulnerability scanning, configuration compliance reviews, and security control validation activities in enterprise IT environments.
• Experience collecting and organizing assessment artifacts and documenting findings in approved formats for audit, inspection, or compliance purposes.
• Experience tracking remediation actions and POA&Ms through validation and closure under established procedures.
• Working knowledge of RMF support activities and continuous monitoring objectives in DoD or federal environments.
• Ability to support assessment and compliance activities across large, distributed enterprise environments with multiple sites, stakeholders, and operational dependencies.
• Ability to communicate findings clearly and coordinate remediation status with senior cybersecurity personnel and other operational stakeholders.