Report this job

---

What is the problem? *

Incorrect company
Incorrect location
Job is expired
Job may be a scam
Other

Job Title: Information Technology Security Support Services
Job Location: Springfield, VA 20598 (On-site )
Job Duration: Long-Term

• Plan, implement, upgrade, and monitor security measures for the protection of computer networks and information. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
• Engaging and advising the System Owner (SO) ensuring adherence to Information Assurance (IA) policies, DHS Security regulations, NIST guidance and other statutory and regulatory policies and guidance.
• Serving as primary cybersecurity point of contact for the Security Operation Center (SOC) and providing support with incident response, investigations and cybersecurity emergencies for assigned systems. Reporting system security incidents in accordance with established procedures
• Serving as the coordinator and responder to audits, data calls, and inquiries for assigned systems, including Management Control Objective Plan (MCOP) assessments and data calls.
• Attending IT security awareness and related training programs and distributing IT security awareness information to the user community.
• Providing security analysis of IT activities ensuring that appropriate security measures are in place and are being enforced.
• Develop and maintain comprehensive system security authorization documentation: security plans, FIPS199, E-Authentication, Privacy Threshold Assessment (PTA), Privacy Impact Assessment (PIA), Contingency Plan, Contingency Plan Test and Plan of Action and Milestones (POA&Ms).
• Coordinate, conduct and support testing efforts such as penetration testing, SCA testing and continuous monitoring.
• Continuously monitor the information system, conduct system scanning and analysis, and provide oversight and monitoring of the security controls on an ongoing basis.
• Proactively monitoring, managing, and engaging with stakeholders for Plan of Action and Milestones (POA&M) for assigned systems. Documenting weaknesses, vulnerabilities, findings, and overdue ISVMs as POA&Ms.
• Manage PKI Certificates for assigned FISMA systems, ensuring all PKI certificates renewals and revocations are completed and processed prior to the expiration. Submitting digitally-signed PDF statement with certificate revocation request affirming that the Device Sponsor who made a revocation request has the authority to do so.
• Apply patches and updates to all network devices, computers, servers, switches, firewalls, and time server

• Extensive experience with government technical publications and implementation (HSPD- 12, FISMA, FIPS-12, DISA, FICAM)
• Extensive experience with Cyber Security Assessment and Management (CSAM), RSA Archer GRC and Doc Tracker
• Extensive experience with RedHat Enterprise and Suse Linux Enterprise server
• Extensive experience with SQL server
• Extensive experience with the following systems: Windows Server 2012, 2016 and newer file and application servers
• Extensive experience with the following systems: Windows 7, 10 and newer
• Must have knowledge and experience with servers, enterprise storage arrays including SAN and NAS solutions
• Must have knowledge and experience with Microsoft Cluster technology
• Must have knowledge and experience with virtualization technology including VM Ware or Microsoft HyperV Virtualization
• Must have knowledge and experience with Microsoft Windows Active Directory
• Extensive experience with Microsoft Windows Server Update Services, Microsoft System Center Configuration Manager, Nessus Professional by Tenable and McAfee Epo
• Extensive experience with Group Policy, Networking IP/DHCP, Exchange, DNS, IIS.
• (Architecture, design, disaster recovery and troubleshooting.)
• Extensive experience with Stratus everRun
• Extensive experience with Innometriks ID server
• Extensive experience with OCSP, PKI and Smartcard ID badges and reader technology
• Must have knowledge and experience with HID ActivID Desktop Validation Client
• Must have knowledge and experience with Corestreet Validation Client
• Must have knowledge and experience with CA Privileged Access Manager
• Must have knowledge and experience with Bomgar BeyondTrust Representative Console
• Must have knowledge and experience with Traka Touch Key Cabinets and Traka Touch Locker Systems
• Must have knowledge with Certipath Trust Visitor and STOPware PassagePoint
• Professional Visitor Management Systems
• Must have knowledge and experience with Telaeris Xpress entry

• Bachelor's degree in computer science or a related field
• Certified System Engineer ICAM PACS (CSEIP) certificate
• Certification for American Dynamics CCTV Systems, Video Edge NVR and Victor Enterprise
• Certification for Identiv Velocity
• Certification for Software House C-CURE 9000