381 Security Specialist jobs in Washington

Benefits:

Competitive salary

As part of the Client technology team, the Security Specialist (Infrastructure Group) will be responsible for maintaining and monitoring the day-to-day operation of the Client IT infrastructure security.

The IT Consultant will assist with monitoring, maintenance, and security of IT infrastructure (physical, virtual, and cloud).

1. Perform OS, security, and application upgrades of servers and network devices to ensure they are up to date.

2. Develop, implement, maintain, and enforce documented standards and procedures for the design, development, installation, modification, and documentation of assigned systems.

3. Plan, coordinate, and monitor project activities for the Client Infrastructure group and other duties as assigned.

4. Onboard logs from various sources into SIEM (e.g., Firewalls, Routers, Switches, Applications).

5. Analyze logs from Firewalls, AD, Switches, and other security products. Knowledge of vulnerability assessment tools like Qualys and Nessus is required.

6. Perform vulnerability assessments and manage vulnerabilities using tools like Qualys and Nessus.

7. Coordinate with the Patching team and assist with patching, including software updates.

8. Have a strong understanding of different security protocols.

9. Respond to escalation calls from Help Desk, Desktop Support, and other teams to troubleshoot and resolve security issues and perform maintenance.

10. Understand security troubleshooting processes and collaborate with other teams.

11. Assist Service Desk technicians with Tier I and Tier II troubleshooting, patching desktop systems, software (MS Office, Java, Adobe), printer issues, and server-related issues as needed.

12. Recommend methods and techniques for problem resolution.

13. Initiate preventive maintenance for technical systems.

This is a remote position.

At MAG Aerospace, we provide and enable real-time situational awareness to help our customers make the world smaller and safer. We are laser focused on serving our customers by providing technical expertise, operational excellence, and flawless execution. Our success is due entirely to the high caliber of employees we recruit, hire, and retain. At MAG Aerospace, we look for individuals who thrive in a high-performance environment where challenges are the norm and success is expected. We are looking for a Jr Information System Officer (ISO) to join our team to support the Navy Cyber Warfare DevGru (NCWDG). Your role would be to provide Cybersecurity support as an Information Systems Officer (ISO) ensuring the confidentiality, integrity, availability, authentication, and non-repudiation of information systems operating in a classified environment. Must be a US Citizen Requires a current Top Secret security clearance. A CI Polygraph will be required within 6 months.

Essential Duties and Responsibilities include the following. Other duties may be assigned.

• Monitor the Command's information systems.
• Ensure that all servers, switches, routers, crypto, fiber connections, attached leased circuits and distant end hardware are all fully secure and following proper operations through security scans and implementation of security controls as directed.
• Monitor user accounts ensuring correct permissions are assigned for level of access.
• Validate in hold accounts of detaching personnel from the Command.
• Provide information assurance guidance and oversight for all Command networks and stand-alone systems.
• Develop formal Information System Security, education and training, and awareness program coordinating with the Command Information Security Systems Manager (ISSM) and keeping the customer informed on all issues.
• Coordinate Information Security inspections to include an incident response action should they be discovered.
• Maintain liaison with high level professionals in other Commands/activities, intelligence agencies, and Contractor facilities to identify and define current and future technologies to support intelligence requirements.
• Create system security plans, plan of action and milestones, security action plan, personnel training, and help maintain policies for all Command networks supporting the ISSM in all missions.
• Monitor information security inspections to include incident response actions as well as ensuring corrective measures have been taken.

Knowledge and Skills:

• Proficient knowledge of Host Based Security Systems (HBSS) and the Assured Compliance Assessment Solution (ACAS)
• Experience with the use of the DoD/DISA Vulnerability Management System (VMS) and Electronic Enterprise Mission Assurance Support Service (eMASS)
• Experience performing vulnerability/risk assessment analysis to support Assessment & Authorization (A&A)
• Understanding and hands on experience in RMF processes and activities to obtain and maintain system ATO.
• Advanced written and verbal communication skills.
• Instruction (CNSSI) 1253 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, and the Joint Special Access Program Implementation Guide (JSIG).
• Demonstrated experience with Intelligence Community Directive (ICD) 705, DoDD 5205.07, and DOD 5205.07-M Volumes 1-4.
• Ability to create IA related acquisition documents.

Minimum years of experience:

• Up to two (2) years of Information Assurance/Cybersecurity (IA/CS) experience is required.
• Qualified candidates will have experience with Risk Management Framework (RMF)
• Up to two (2) years of experience with security controls and implementation delineated in Committee of National Security Systems.

Education:

• BS in Computer Science, Information Systems Management, or related area of study.

• Experience with effective policy, instruction, and development for Federal or DoD Information Security Programs.
• Experience with risk analysis and assessment determinations.
• Experience with Xacta.
• Current CI polygraph.

• Current active TS/SCI DoD Security Clearance
• Possess DoD Approved Baseline Certification as Information Assurance Manager Level II in accordance with DOD 8570.01-M. (i.e., CISSP, JSSEP, Sec+CE, GSNA, GSLC or CISM)
• This position is 100% in Government spaces; no telework authorized
• Must be a US Citizen

The position is contingent upon candidate's ability to meet physical and medical requirements as needed by the position; including compliance with all applicable federal, state, and local jurisdictional requirements.

At MAG Aerospace, we value your contributions providing our employees with a robust Total Rewards package that supports your total well-being. Full-time and part-time employees working at least 30 hours a week on a regular basis are eligible to participate in MAG's Total Rewards programs. Our offerings include health, life, disability, financial, and retirement benefits as well as paid leave, professional development, and tuition assistance. Individuals that do not meet the threshold are only eligible for select offerings not inclusive of health benefits. We encourage you to learn more about our Total Rewards Program by visiting the Resource page on our Careers site.

Salary at MAG Aerospace is determined by various factors including but not limited to location, the particular combination of education, knowledge, skills, competencies, and experience as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $12000 to $13000 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of MAG's total compensation package for employees.

• Identifying Security Controls that are Provided by the Organization as Common Controls for Organizational Information Systems and Document the Controls into the SSP or equivalent Documents
• Tailoring Security Controls as Needed
• Developing a Strategy for Monitoring Security Controls Effectiveness and any Proposed or Actual Changes to the Information System
• Implementing Security Controls
• Documenting the Implemented Security Controls in the SSP with a Functional Description of the Control Implementation
• Developing, Reviewing and Approving a Plan to Assess Security Controls
• Assessing Security Controls in Accordance with the Assessment Procedures Defined in the SSP.
• Preparing the Security Assessment Reports Documenting the Issues, Findings and Recommendations
• Submitting the Security Assessment Report to the System Owner
• Monitoring Security Controls
• Performing System Security Research, Analysis, and Design for New Systems
• Verifying and Validating System Security Requirements and Analyzing System Security Designs.
• Implementing Information Security Requirements
• Performing System Security Research, Analysis, and Design
• Assisting in the Development of Security Assessment Packages
• Planning and Overseeing Systems Configuration Changes
• Participating in Security Inspections, Tests and Reviews
• Conducting an internal C&A/A&A for a unique isolated network.
  Identifying potential threats, suspicious/anomalous activity, malware, etc.
  Candidate must have the ability to recommend IA hardening without losing agility.

• Minimum of minimum of three (3) years’ experience directly supporting information systems security efforts.
• Certified as an information systems security professional (CISSP)

Dynamic Solutions Technology, LLC , a premier strategic services firm that meets IT and Service needs for commercial and government clients, is seeking a full-time Cyber Security Specialist in support of the government customer located inArlington, VA.

Responsibilities:

• Integrate and test new technology for compliance with IT security standards
• Perform analysis to ensure security controls are consistently implemented throughout system development life cycle and continuous monitoring phase.
• Develop, document, and execute plans for monitoring, assessing, and verifying security controls across assigned information systems
• Documenting security control implementation statements.
• Knowledge of network security architecture concepts, including topology, protocols, components, and principles.
• Demonstrated experience creating system continuous monitoring and contingency plans that identify critical mission and business functions and recovery processes and procedures.
• Analyze Information Assurance Vulnerability Alert (IAVA) requirements to determine applicability to existing systems
• Provide recommendations, guidance, and corrective action for all non-compliant security controls.
• Develop test scenarios and exercises as required to evaluate, analyze, and investigate emerging technologies
• Request, gather, and comprehend evidence required to closeout open POA&MS.
• Conduct comprehensive self-assessments consisting of automated and manual security assessments of the management, operational, and technical security controls
• Optimize processes to meet IT security-related goals and strategies by documenting lessons learned for each system and application by authorization month and year.
• Enter test results and artifacts into the bureau/department repository
• Document assessment activities and results in sufficient detail to enable external review of all assessment processes, activities, results, and conclusions
• Provide guidance to key stakeholders on the necessary components to demonstrate the achievement of control objectives
• Provide support in the RedHat operating systems
• Support periodic assessment of a bureau-identified subset of security controls across assigned information systems.
• All other duties assigned

Required:

• High school or GED education
• Security+ Certification
• Must meet specific certification and training requirements in accordance with DoD 8570.1-M or DoD 8140 compliance
• Some knowledge of SDLC, project manage principles, and ITIL.
• Knowledge of of Windows 10, Windows 11, Windows Server 2016, Redhat, and Structured Query Language (SQL)

Qualifications:

• Knowledge of the processes and documentation requirements for RMF methodologies
• Demonstrated experience supporting Government Agencies preferably DOS.
• Able to gain proficiency with a broad array of security software application and tools
• Security + certification
• Organized with attention to detail

We are seeking a qualified Cyber Security Specialist who will be able to readily adapt to varied client environments, with responsibilities ranging from broad network security program development to deployment and implementation of broad ranging technical security controls.

1. Provides Cyber Security support for classified and unclassified systems (hardware and software)
2. Responsible for defining, documenting, and maintaining Cyber Security policies
3. Responsible for Plan of Action and Milestone response and resolution activities
4. Responsible for maintaining the organization compliance with FISMA and associated cyber security requirements
5. Local travel required between client sites

1. Previous consulting or regulatory experience is required with a minimum of 5 years of experience in security/industrial networks arena
2. Experience with NIST 800-53 standards, NERC-CIP standards, AGA, NRC and other Industry and Regulatory Compliance Requirements
3. Experience implementing NIST control requirements
4. Ability to execute in a methodical manner to gather, document and perform assessments
5. Experience in documentation to clearly articulate technical designs, procedures, etc.
6. CISSP certification a MUST
7. Experience working in a Nuclear environment is a plus!

BS required