THOR Solutions is seeking a Senior Information System Security Specialist to provide engineering support for Cyber Situational Awareness (SA), Cyber Command and Control (C2), Mission Assurance, and Homeland Defense in Virginia Beach, Virginia. This includes conducting Agile software engineering in a Development, Security, and Operations (DevSecOps) environment, performing Cloud architectural design, operation, and administration functions, and cyber security and Risk Management Framework (RMF) support. Also included are rapid design, development, test, deployment, maintenance and operation of specific software and hardware capabilities to meet current Cyber Defensive needs.
The candidate’s responsibilities may include (but are not limited to) performing, supporting, or supervising the following actions:

• Used, installed, and configured ESS (Endpoint Security Solutions).
• Provides technical and programmatic Information Assurance Services to internal and external customers in support of network and information security systems.
• Designs, develops and implements security requirements within an organization’s business processes.
• Prepares documentation from information obtained from customer using accepted guidelines such as RMF (Risk Management Framework) using Xacta and EMASS.
• Prepares test plans.
• Provides assessment and authorization (A&A) support in the development of security and contingency plans and conducts complex risk and vulnerability assessments.
• Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps.
• Develops and completes system security plans and contingency plans.
• Recommends system enhancements to improve security deficiencies.
• Develops, tests and integrates computer and network security tools.
• Secures system configurations and installs security tools, scans systems in order to determine compliancy and report results and evaluates products and various aspects of system administration.
• Conducts security program audits and develops solutions to lessen identified risks.
• Develops strategies to comply with privacy, risk management, and e-authentication requirements.
• Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.
• Evaluates, develops and enhances security requirements, policy and tools. Provides assistance in computer incident investigations.
• Performs vulnerability assessments including development of risk mitigation strategies.

Location: Onsite at Dam Neck Naval Base in Virginia Beach, VA. 
Travel: Up to 10% travel is anticipated.
US Citizenship Required: Due to the requirements of the federal contract that this position supports, U.S. citizenship is required. Citizenship will be confirmed via I-9/E-Verify at the start of employment.
Existing Top Secret/SCI Security Clearance Required: This position requires a DoD Top Secret/SCI security clearance. A qualified candidate will already possess an Active Top Secret/SCI clearance.
Required Knowledge, Skills, and Abilities:

• Bachelor’s Degree in Cyber Security or Computer Science.
  • Master’s degree or PhD in Computer Science or Cyber Security is preferred.
    • Minimum of eight (8) years of experience with a BS/BA degree.
    • Minimum of six (6) years of experience with a MS Degree.
    • Minimum of three (3) years of experience with a PhD.
• Minimum of two (2) years’ experience in performing Risk Management Framework activities using Xacta and EMASS.
• Use, installed, and configured ESS (Endpoint Security Solutions).
• Demonstrated experience with performing STIG assessments to include using SCAP benchmarks.
• Demonstrated experience performing vulnerability assessments with the Assured Compliance Assessment Solution tool.
• Demonstrated experience using STIG.
• Experience in developing Plans of Actions and Milestones (POA&M) entries.
• Experience in completing Risk Management Framework Step 5 authorizations in the Information System Security Engineer (ISSE) capacity.
• Experience in communicating risk reduction recommendations to stakeholders.

Required Certifications:

• Qualify under the DOD Cybersecurity Workforce (CSWF) as a Systems Security Analyst (461) at the Intermediate level, in accordance with DOD 8570.01-M. Typically this includes at least ONE of the following credentials:
  • Associate Degree from accredited university in a relevant discipline such as Computer Engineering, Computer Programming, Computer Science, Electrical Engineering, or similar.
  • CNSSI 4011-Information Systems Security (INFOSEC) Professionals/4012-Senior Systems Managers
  • CYBR2400 Cyber Operator Training Course
  • One of the following Navy Enlisted Classifications:
    • NEC 741A Information System Security Manager
    • NEC 742A Network Security Vulnerability Technician
    • NEC H08A Advanced Network Analyst
  • CompTIA Advanced Security Practitioner (CASP )
  • CompTIA Security CE (Sec )
  • ISC2 Certified in Governance Risk and Compliance (CGRC)
  • ISC2 Systems Security Certified Practitioner (SSCP)
• IAT Level II Certification

THOR is proud to be an Affirmative Action/Equal Opportunity Employer. THOR considers all qualified applicants for employment without regard to age, race, ethnicity, color, religion, sex, sexual orientation, gender identity or expression, national origin, genetics, disability status, or status as a protected veteran. THOR complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment. Equal Employment Opportunity (EEO) is the law.

Please be aware that many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens.

Founded in 2009, THOR Solutions, LLC (THOR) is a rapidly growing Center for Veteran’s Excellence (CVE) verified Service Disabled Veteran Owned Small Business (SDVOSB) providing mission critical support across the Department of Defense, federal civilian agencies and commercial maritime industry, worldwide. THOR provides innovative and tailored expertise in multidisciplinary engineering, project and program management, business and financial management, technical support, integrated logistics support, training support, fleet support, corporate operations support, assessments and studies. THOR is privileged to deliver service solutions to the nation’s most complex military, public sector and industry challenges.

THOR is proud to be an Affirmative Action/Equal Opportunity Employer. THOR considers all qualified applicants for employment without regard to age, race, ethnicity, color, religion, sex, sexual orientation, gender identity or expression, national origin, genetics, disability status, or status as a protected veteran. THOR complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment. Equal Employment Opportunity (EEO) is the law.

THOR is proud to be a Veteran-Friendly Employer. THOR does not discriminate against a qualified applicant because of their status as a protected veteran, or their relationship or association with a protected veteran. This includes spouses and other family members.

If you are an individual with a disability and would like to request a reasonable accommodation as part the employment selection process, please contact us at recruiting@thorsolutions.us or (571) 215-0077.

If you would like to view a copy of THOR’s affirmative action plan, please email recruiting@thorsolutions.us.