Responsibilities:
• Assist in the security configuration and management of collateral classified and unclassified systems and networks in a variety of traditional and virtual environments including Linux, Unix, Solaris, and Windows
• Assist divisional ISSM and System Administrators in the development and maintenance of System Security Plans (SSP) and associated artifacts such as the Plan of Action & Milestones (POA&M), Risk Assessment Report, and Continuous Monitoring Strategy.
• Ensure systems are operated, maintained, and disposed of in accordance with the Risk Management Framework security policies and procedures.
• Collect, analyze, and store system audit records.
• Conduct network, system, and application vulnerability scanning, configuration assessment, and remediation.
• Prepare for and participate in periodic organization compliance assessments.
• Ensure account management documentation is complete and updated.
• Maintain configuration management documentation (change tracking, maintenance logs, etc.) Required Skills:
• Technical experience and skills in securing multiple operating systems such as Windows, Linux and virtualization technologies
• Technical experience securing networks and systems utilizing DISA STIGs and/or SRGs.
• Knowledgeable in computer security principles and policies, including Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), National Industrial Security Program Operating Manual (NISPOM), and Defense Security Service (DSS) Assessment and Authorization Manual (DAAPM).
• Experience with vulnerability scanning and auditing tools and processes
• Excellent written and verbal communication skills, organizational and time management skills
• A minimum of 3 years of IT security experience in DoD Industrial
• Possess Security certification or be able to obtain one within 6 months of hire.