This position is local telework eligible to Hampton Roads area.

Job Summary:

Responsible for network and security controls design review implementation and troubleshooting of IT security systems including hardware software and appliances.

Duties and Responsibilities:

Incumbents of this position must be U.S. Citizens.

-  Responsible for overall review and monitoring of the security for IT security enterprise-wide.

-  Responds to incidents that may impact enterprise security.  Works to identify risk elements, and offers solutions to mitigate that risk.

-  Researches IT security software and hardware solutions, and determines technical applicability to the NEXCOM enterprise.

-  Configures, maintains, and manages all IT security-related devices including Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Firewalls, Proxy Servers, STFP servers, etc.

-  Manage, monitor, and identify risk for all NEXCOM Internet, Intranet, and Extranet activities.  Identify security exposures that may currently exist or may pose a potential future threat to the NEXCOM enterprise.

-  Configure and maintain both the internal/trusted network and service network security standards and polices.

-  Provides monitoring and analysis on the output of security devices, including logs, application output, etc. and providing reporting to all levels within the command on risk identification and assessment.

-  Establish appropriate firewall and proxy server policies, both inbound and outbound.

-  Acts as a member of the Incident Response Team, identifying the threat, and taking the proper steps to correct the problem.

-  Complies with DoD, DoN, NAVSUP, PCI, NEXCOM and industry best security practices, standards, and policy directives.

-  Stays current on security threats, mitigation, and technology, and provides recommendations to all levels of the Information Systems department.

- Ensure/implement the rigorous application of Information Security/Information Assurance policies, principles, and practices in the delivery of Systems, Applications and/or Services (Hardware & Software).

-  Perfoms other duties as assigned.

IAT2 jobs:
SECNAV M-5239.2 DoN, Information Assurance (IA) Workforce Manual requires that all incumbents of this position possess, and maintain current, two types of certifications as follows:
IA Certification:  One of the following certifications: Security+, GIAC Security Essentials Certification (GSEC), Security Certified Network Professional (SCNP), Systems Security Certified Practitioner (SSCP); or any one of the following higher level certifications: Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), GIAC Security Expert (GSE), Security Certified Network Architect (SCNA).
NEXCOM preferred certification is Security Certified Network Professional (SCNP).

Technical Certification: Palo Alto Accredited Configuration Engineer (ACE).  Certification must be valid (not expired) as defined by the policy of the certification issuer.
Candidates without the required certification may be placed into this job, but