Cybersecurity Subject Matter Expert

Benefits:

• 401(k) matching
• Bonus based on performance
• Competitive salary
• Dental insurance
• Health insurance
• Paid time off
• Parental leave
• Training & development
• Vision insurance
  
  
  

ORGANIZATIONAL BACKGROUND

Established in August 2016, Basecamp Consulting and Solutions is a dynamic Information Technology (IT) consulting firm committed to delivering results for our clients. Specializing in next-generation IT and digital transformation solutions, Basecamp Consulting and Solutions is dedicated to helping clients achieve success through trust, innovation, quality work, and a steadfast commitment to results.

At Basecamp, we believe in the power of emerging technologies to propel our clients toward their goals. Our focus lies in business and IT modernization, utilizing Cloud solutions, cybersecurity, and cutting-edge application development. We pride ourselves on a team of talented professionals who are passionate about supporting our clients on their journey towards innovative outcomes.

Basecamp Consulting and Solutions is dedicated to pushing the boundaries of IT consulting and we are equally committed to embodying these principles in every facet of our work.

Position Overview

Reporting to the Project Manager, the Cybersecurity Subject Matter Expert provides expert support, research and analysis of exceptionally complex problems, and processes relating to them. Serves as technical expert to the Cybersecurity Assessment Program providing technical direction, interpretation and alternatives to complex problems. Thinks independently and demonstrates exceptional written and oral communications skills. Applies advanced technical principles, theories, and concepts. Contributes to the development of new principles, concepts, and methodologies. Works on unusually complex technical problems and provides highly innovative and ingenious solutions. Recommends cybersecurity software tools and assists in the development of software tool requirements and selection criteria to include the development of product specific STIGs from applicable DISA SRGs. Works under consultative direction toward predetermined long-range goals and objectives. Assignments are often selfinitiated.

Determines and pursues courses of action necessary to obtain desired results. Develops advanced technological ideas and guides their development into a final product. Expertise is in the area of cybersecurity and evaluations.

Required Qualifications

• Active DoD Secret Clearance
• IAT II Certification (CompTIA Security etc)
• IAM III Certification (CompTIA CASP etc)
• One of the following: Licensed Penetration Tester (LPT), Certified Expert Penetration Tester (CEPT), Certified Ethical Hacker (CEH), Global Information Assurance Certification Penetration Tester (GPEN).
• Proven proficiency performing CCRI/ vulnerability assessment/ penetration testing on networks,
• databases, computer applications and IT frameworks
• Seven years IT experience
• Five years IA experience
• Strong analytical and problem solving skills for resolving security issues
• Strong skills implementing and configuring networks and network components
• Three years of experience working with Cloud Computing environments
• Command Cyber Readiness Inspection certification in at least one of the following areas:
• Retina scan analysis
• Operating Systems (Windows, Unix)
• Boundary defense (network policy, router, firewall)
• Internal defense (L2 switch, L3 switch)
• DNS (policy, BIND/Windows)
• HBSS (remote console, AV, ABM, PA, HIPS, ePO)
• Traditional security (Common, Basic, NCV, SCV)
• Wireless communications (BES, handhelds)
• Tenable Certified NESSUS Auditor
• Knowledge and understanding of DOD security regulations, DISA STIGs
• Strong knowledge of SCAP
• Strong knowledge of RMF
• Excellent knowledge of and proficiency with:
• VULNERATOR
• USCYBERCOM CTO Compliance Program
• Wireless vulnerability assessment
• Web Services (IIS, Apache, Proxy)
• Database (SQL Server, Oracle)
• Email Services (Exchange)
• Vulnerability Scans (NESSUS, SCCM)
• Knowledge of Phishing exercises
• USB Detect
• Physical Security
  
  
  

This is a remote position.