Job Profile: Information Security Risk Specialist

As an Associate Cybersecurity Mission Specialist, you will be responsible for managing the day-to-day operations and effectiveness of security-related programs and initiatives. You will assess the costs associated with potential threats and develop innovative solutions to complex problems using advanced consulting skills and extensive technical expertise.

Key Responsibilities:

• Conduct real-time monitoring and analysis of network traffic and security alerts to identify potential security breaches or suspicious activities.
• Perform in-depth investigations into security incidents, including malware analysis, forensics, and threat intelligence analysis.
• Collaborate with cross-functional teams to develop and implement proactive measures to prevent cyber-attacks and unauthorized access.
• Develop and maintain comprehensive threat models, risk assessments, and incident response plans.
• Stay abreast of emerging cyber threats, vulnerabilities, and industry best practices to continuously improve our cyber defense capabilities.
• Provide expertise and guidance to internal stakeholders on cybersecurity matters, including risk management, compliance requirements, and security awareness training.
• Support the development and implementation of security controls, policies, and procedures to mitigate cyber risks effectively.
• Contribute to the enhancement of security tools and technologies to automate threat detection and response processes.

Basic Qualifications:

• 10 years of professional experience in areas such as Federal government, professional services, or Federal consulting, including briefing clients and/or team members on technical, policy, and functional issues.
• 8 years of experience supporting DoD-level cybersecurity defense teams and capable of providing an operational understanding of cybersecurity defense practices.
• 4 years of experience writing or drafting executive or formal senior-level correspondence and/or material to support decision-making.
• 2 years of experience drafting organization-level technical policies and strategies.
• 1 year of experience supporting DoD architecture concepts (e.g., DISN Core architecture).
• Strong understanding of cyber threats, attack vectors, and defensive strategies.
• Proficiency in security information and event management (SIEM) tools, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions.
• Experience with performing security assessments, penetration testing, or vulnerability scanning.
• Excellent analytical and problem-solving skills with the ability to prioritize and manage multiple tasks under pressure.
• Effective communication skills, including the ability to convey technical concepts to non-technical stakeholders.

Education:

• BA or BS degree in Information Security, Cybersecurity, or related field
• CISSP or CISM Certification preferred.

Additional Qualifications:

• Excellent written and verbal communication skills
• Strong organizational skills with the ability to multi-task and prioritize responsibilities.
• Knowledge of NIST 800 series publications
• Knowledge of Joint instructions and manuals

Location: Washington, DC

Clearance: Top Secret (TS) Clearance required