Position Description and Job Skill Set

Description of the job functions the contractor will be expected to perform.

This position will be accountable for performing a wide range of complex security procedures and processes necessary

to ensure the safety of information systems and assets and protect systems and data from intentional or inadvertent

access or destruction. Ensures that users understand and adhere to the necessary procedures and processes to

maintain security. Conducts complex IT data and security forensic investigations. Conducts internal vulnerability

management to meet regulatory and standards compliance. Requires knowledge of domain structures, user

authentication and digital signatures. Requires in-depth knowledge of intrusion detection and internet architecture.

Implements and administers Cybersecurity related systems.

Required Skills/Experience

5 years of Cybersecurity related experience.

Tenable/Nessus or other vulnerability scanning experience.

Endpoint protection, AV/XDR, AV/XDR policy config, endpoint agents.

SIEM, logging/syslog, Alerting.

Windows/Linux Server administration of on-premise Cybersecurity applications.

Experience with cybersecurity tools used for routine security related tasks. Example: Nmap, Wireshark, phishing sim.

Experience participating in situational tabletop exercises (malware, phishing, ransomware).

2

Beginner: 1-2 years Intermediate: 3-5 years Advanced: 5-7 years SME: 7 years

Skill Set Skill Level

(See key code above) Required/Preferred Notes

Operating Systems

Windows Server Advanced Required

Windows 10-11 Advanced Required

Linux Intermediate Required

Programming Language/Development Tools

XQL Intermediate Preferred

Python Intermediate Preferred

PowerShell Intermediate Preferred

Database Systems/Database Tools

Cybersecurity Tools Advanced Required

Framework/SLD/Methodology

NIST CSF Advanced Required

MITRE Advanced Required

Pub 1075/SSA/PII Advanced Preferred

QA/Testing Approaches, Application

Vulnerability Scanning Advanced Required Tenable/NessOther

Endpoint Protection Advanced Required AV/XDR

SIEM Advanced Required Logging. Syslog, Alerting