The Cybersecurity Process Engineer – Senior provides cybersecurity expertise and Service Management process guidance to support the Defense Information System Agency (DISA) technology infrastructure. Assesses system risks and facilitate remediation of security vulnerabilities. Using ITSM process experience, report on findings

and provide recommendations for corrective actions. Interface with governance teams in organization. Perform vulnerability assessments as assigned, utilizing IT security tools and methodologies.

Responsibilities:

Collaborate with internal and external SMEs and senior-level Government customers to determine the best courses of action in preparation for IT audits, risk assessments, and regulatory requirements.

Conduct cybersecurity research and analysis to support DISA's Configuration Control Board. Coordinate with government counterparts to support expert provisioning Remedy ITSM ticket management and customer support.

Execute Assured Compliance Assessment Solution (ACAS) and Host Based Security System (HBSS) scans to determine infrastructure vulnerability state and develop highly customizable reports for briefings to DISA's leaders

Configure, update, and manage Assured Compliance Assessment Solution (ACAS) and Host Based Security System (HBSS) in support of DES Operations

Coordinate with engineers to troubleshoot cyber issues to identify the problem root causes and provide solutions.

Conduct technical analysis and present findings on proposed DES changes; clearly articulate the rationale in favor of or recommendation for rejection against proposed changes

Analyze, Uses Government-provided IT Service Management (ITSM) tool to track key performance indicators such as assignment, completion, and timeliness

Recording and validating resolution with incident/problem owners IAW with the DES Incident Management SOP and the DES Security Management SOP is required prior to closing out trouble tickets.

Develop, edit, and update Security SOPs and TTPs for Operations

Responsible for reviewing regulatory security policies, as well as best practices, and develop the technical solution required to implement those requirements on servers, routers, firewalls, and other LAN/WAN

equipment

Strong experience with implementing configuration baselines and DISA STIGs Strong experience with vulnerability mitigation and patching

Reporting security incident status and progress to senor Government stakeholders Have flexible working hours to be available to support team when needed

Knowledge and Skills:

Excellent verbal and written communication skills

Ability to organize and facilitate planning and demonstrations

Ability to track, manage, and ensure project tasks are completed in a timely manner

Technical Knowledge

ServiceNow/Remedy ITSM

SolarWinds Network Configuration Monitor (NCM) System Center Configuration Manager (SCCM) Palo Alto Firewalls

ACAS HBSS

Education and Experience:

Bachelor’s Degree

6 years of experience

Network or other Certifications needed or specialty experience:

ITIL v3 Foundation or advanced ITIL certifications such ITIL Intermediate Certifications in Service Lifecycle and/or Service Capability, & ITIL Practitioner are preferred

3 yrs ServiceNow/Remedy ITSM experience preferred

IAT Level II Security CE (or appropriate DoDM 8570 Baseline Certification)

Clearance/Citizenship:

Secret

Must be US Citizen

Location: Fort Meade, MD