6 jobs found

Futrend Technology Inc. is seeking an IT Cloud Security Analyst to join our security compliance team. In this role, you will work closely with the customer's Information Systems Security Officer (ISSO) and play a critical part in safeguarding NLM's IT infrastructure. The role focuses on implementing security controls, ensuring compliance with federal cybersecurity framework and support secure cloud adoption across multiple platforms. The analyst works closely with end point owners, infrastructure and network security teams, and with enterprise security teams to meet NIH mandates. You will be part of a broader IT program that provides end-to-end support-including help desk, systems, network, incident response and security services-ensuring the availability, integrity, and confidentiality of mission-critical systems. This position is based in Bethesda, MD and requires onsite presence 3 to 5 days/week. Responsibilities Implement security controls, and ensure compliant cloud environments on AWS, GCP, or Azure adhering to FISMA, NIH policy, and federal security requirements Recommend, design and support Cloud security services and control implementation including Identity Access, Privileged access, Vulnerability management, Configuration compliance, encryption, and centralized security log management Monitor cloud environments for security events, anomalies, and configuration drift using SIEM (e.g., Splunk), conduct vulnerabilities assessments, track remediation and maintain dashboards with measurable metrics to report overall security posture Integrate and optimize enterprise security solutions such as Splunk, Tenable and other data sources to enhance continuous monitoring, event correlation, and compliance visibility across NLM's hybrid environment Investigate and respond to security incidents and alerts, perform root-cause analysis and proper remediation actions and reporting per NIH's established incident response plan Conduct threat modeling and security assessments of cloud deployments to identify and mitigate vulnerabilities, develop security requirements and provide guidance for applications migrating from on-prem implementations to the cloud environment Enhance and automate security and compliance checks using a combination of available tools and scripting; evaluate emerging platforms (like AI-based capabilities) to improve coverage, visibility, and operational efficiency Provide security guidance, best practices, and compliance support to developers, operations teams, system owners and other stakeholders, promoting security awareness Required Qualifications Proven experience securing cloud environments (AWS, GCP or AZURE), preferably within FISMA compliance frameworks Strong working knowledge of AWS, GCP or Azure cloud security, including logging, tagging strategies, ephemeral resource tracking, and cross-platform operations In-depth knowledge and demonstrated experience of applying federal compliance frameworks including FISMA, NIST 800-53, FedRAMP, RMF, NIH policy and supporting system authorization processes (ATO, POA&M) and policies to information systems Hands-on work experience with automation, security event correlation, asset inventory tracking and SEIM management (preferably in SPLUNK), utilizing scripting or programming such as PowerShell, Bash, Python or equivalent and use of APIs Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience in Cloud security) 5+ years of experience in information security, with at least 3 years focused on cloud security, administration of Linux and Windows endpoints, strong understanding of network and firewall operations Strong written and verbal communication skills, with the ability to produce clear security documentation and effectively communicate technical concepts to technical and non-technical stakeholders Experience working in regulated federal environments with complex governance and compliance requirements; collaborating and guiding multi-disciplinary teams managing servers, workstations, network appliances, security appliances Certifications: CISSP (or ability to obtain within 6 months) Desired Qualifications AWS/GCP/Azure Certified - Specialty certifications Advanced Linux and Windows administration experience Experience with container security (like Docker & Kubernetes) PI988200d3d24a-4435

RDTS is seeking a cleared, senior-level Information System Security Officer (ISSO) to support the U.S. Dept of Treasury in Washington, D.C. The ISSO shall provide services to support and ensure network security/strategy is in compliance with Federal Information Security Management Act (FISMA), Committee for National Security Systems (CNSS) directives, and Department of Defense (DOD) requirements. Support includes after-hours or weekend support for maintenance, outage resolution, or other service support requested by the Government. This position is full-time and fully onsite, and available upon a favorable federal background check. Responsibilities include, but not limited to: Support Risk Management Framework (RMF) activities Assist with certification, accreditation, and system authorization efforts Develop and maintain SSPs, POA&Ms, and related authorization documents Support FISMA, CNSS, and Treasury security requirements Review/process IATT, ATO, ISA, and waiver documentation. Candidate must have completed an ATO package. Support annual A&A activities Review weekly vulnerability ACAS scans and track, manage, and document remediation actions Provide daily oversight of HBSS, ACAS, and related security monitoring tools Submit monthly STIG compliance, ACAS detailed reporting, and SSP updates Assist with ad-hoc data spillage reporting (within required timeframe) Support incident reporting and After Action Reports (AARs) Participate in technical incident response exercises. Active Security Clearance. Bachelor's Degree in Information Technology or related field from an accredited institution, Master's degree desired. Minimum 8 years of experience performing ISSO duties with at least 3 years' experience supporting IT enterprises within a classified environment. Demonstrated proficiency performing the tasks and responsibilities listed above. Experience working alongside high-level government personnel. Strong interpersonal skills and temperament to work with a team and individually with minimal supervision. Strong verbal and written communication skills. CompTIA Security+, required CySA+, CISSP, CISM, preferred All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, age, marital status, pregnancy, genetic information, or other legally protected status. PIef730ea29be1-2054

JT4 China Lake is seeking an Information Systems Security Specialist. This role is responsible for assessing, developing and implementing programs and controls set in place to help increase cybersecurity within our company. The Information Systems Security Specialist will be detail-oriented, have great problem-solving and analytical skills, and a passion for cybersecurity. JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force, Space Force, and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. JT4 develops and maintains realistic, integrated test and training environments and prepares our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges. An ideal candidate will have an active DoD secret clearance This position is located at China Lake and is not eligible for telework Job Summary Essential Functions/Duties This position is the on-site technical specialist for monitoring information systems and maintaining the environment of operation to include developing and updating System Security Plans, managing and controlling changes to the systems, conducting audits, providing incident response, perpetration for vulnerability assessments, and assessing the security impact of security and non-security-relevant changes. Employee will be responsible to perform the following functions/duties: Provides incident handling in conjunction with the Facility Security Office (FSO) and Information Security Officer / Information Systems Security Manager (ISSO/ISSM) Assists in writing and maintaining computer security processes to meet Air Force requirements of Risk Management Framework Monitors computer system use and audits logs Makes recommendations for future hardware / software implementations and related process improvements This position requires skills in leadership, team building and customer service Provides operational status as required Uses established policies and procedures and subject matter knowledge to complete complex assignments requiring originality and ingenuity performed under minimum supervision with considerable latitude for independent contribution Provides security training and awareness briefings Other duties as assigned. Other Responsibilities Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job. Working Conditions This position involves work typical of an office environment with no unusual hazards. There is occasional lifting (up to 20 pounds), constant sitting and use of a computer terminal, constant use of sight abilities while writing, reviewing, and editing documents, constant use of speech/hearing abilities for communication, and constant mental alertness. Requirements Education, Technical, and Work Experience Associates or higher degree in Computer/Information Technology, or equivalent academic/technical training/certification. Possess two-three years of experience in computer system security and/or related areas of expertise. Must be compliant to DoD 8570.01-M levels and possess or working toward Security+ certification with a CISSP desired. Should have experience with JSIG, NIST 800 and NISPOM, Chapter 8. In addition, an Information Systems Security Specialist I must possess the following qualifications: Must possess and apply a broad knowledge of principles, practices and procedures in computer security and information systems and working experience with Microsoft Office, Access, and Visio Must possess experience supporting various system configurations such as Stand Alone, Local Area Networks, and Wide Area Networks Must possess excellent skills in verbal and written communications, planning, and organizing, and be able to work under deadlines. Employee is expected to routinely cross fields in the completion of somewhat difficult and varied assignments; government vehicle is used on an as-needed basis Must possess ability to work in a field environment at remote locations with occasional overnight assignments Must qualify for and maintain a government security clearance Must possess a valid, state-issued driver's license. Disclaimer The above statements are intended to describe the general nature and level of work being performed by personnel assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of persons so classified. Tasking is in support of a Federal Government Contract that requires U.S. citizenship. Some jobs may require a candidate to be eligible for a government security clearance, state-issued driver's license, or other licenses/certifications, and the inability to obtain and maintain the required clearance, license, or certification may affect an employee's ability to maintain employment.

JT4 Point Mugu is seeking an Information Systems Security Specialist. This role is responsible for assessing, developing and implementing programs and controls set in place to help increase cybersecurity within our company. The Information Systems Security Specialist will be detail-oriented, have great problem-solving and analytical skills, and a passion for cybersecurity. JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force, Space Force, and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. JT4 develops and maintains realistic, integrated test and training environments and prepares our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges. An ideal candidate will have an active DoD secret clearance This position is located at China Lake and is not eligible for telework Job Summary Essential Functions/Duties This position is the on-site technical specialist for monitoring information systems and maintaining the environment of operation to include developing and updating System Security Plans, managing and controlling changes to the systems, conducting audits, providing incident response, perpetration for vulnerability assessments, and assessing the security impact of security and non-security-relevant changes. Employee will be responsible to perform the following functions/duties: Provides incident handling in conjunction with the Facility Security Office (FSO) and Information Security Officer / Information Systems Security Manager (ISSO/ISSM) Assists in writing and maintaining computer security processes to meet Air Force requirements of Risk Management Framework Monitors computer system use and audits logs Makes recommendations for future hardware / software implementations and related process improvements This position requires skills in team building and customer service Provides operational status as required Uses established policies and procedures and subject matter knowledge to complete complex assignments requiring originality and ingenuity performed under minimum supervision with considerable latitude for independent contribution Provides security training and awareness briefings Other duties as assigned. Requirements Education, Technical, and Work Experience Associates or higher degree in Computer/Information Technology, or equivalent academic/technical training/certification. Possess two to three years of experience in computer system security and/or related areas of expertise. Must be compliant to DoD 8570.01-M levels and possess or working toward Security+ certification with a CISSP desired. Should have experience with JSIG, NIST 800 and NISPOM, Chapter 8. In addition, an Information Systems Security Specialist must possess the following qualifications: Must possess and apply a broad knowledge of principles, practices and procedures in computer security and information systems and working experience with Microsoft Office, Access, and Visio Must possess experience supporting various system configurations such as Stand Alone, Local Area Networks, and Wide Area Networks Must possess excellent skills in verbal and written communications, planning, and organizing Ability to work under deadlines. Employee is expected to routinely cross fields in the completion of somewhat difficult and varied assignments. Government vehicle is used on an as-needed basis Ability to work in a field environment at remote locations with occasional overnight assignments Must qualify for and maintain a government security clearance Must possess a valid, state-issued driver's license. Salary The expected salary range for this position is $83,907.20 to $98,907.20 annually. The salary range offered for this position is a good faith description of the expected salary range this role will pay. JT4 LLC considers factors such as (but not limited to) responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and business considerations when extending an offer. Benefits Medical, Dental, Vision Insurance Benefits Active on Day 1 Life Insurance Health Savings Accounts/FSA's Disability Insurance Paid Time Off 401(k) Plan Options with Employer Match JT4 will match 50% up to an 8% contribution 100% Immediate Vesting Tuition Reimbursement Other Responsibilities Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job. Working Conditions This position involves work typical of an office environment with no unusual hazards. There is occasional lifting (up to 20 pounds), constant sitting and use of a computer terminal, constant use of sight abilities while writing, reviewing, and editing documents, constant use of speech/hearing abilities for communication, and constant mental alertness. Disclaimer The above statements are intended to describe the general nature and level of work being performed by personnel assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of persons so classified. Tasking is in support of a Federal Government Contract that requires U.S. citizenship. Some jobs may require a candidate to be eligible for a government security clearance, state-issued driver's license, or other licenses/certifications, and the inability to obtain and maintain the required clearance, license, or certification may affect an employee's ability to maintain employment. SCC: JCIS11; A4CLR

As a key member of our cybersecurity team, you will be instrumental in guiding the application of IT security controls that ensure the confidentiality, integrity, and availability of system data and resources. Your solutions will align with existing system and network configurations, collaborating closely with configuration managers to maintain seamless security integration. In this position, you will lead critical functions related to the Risk Management Framework (RMF), overseeing the approval, sustainment, and disposition of Department of Defense (DoD) Information Systems. This includes continuous monitoring, vulnerability assessments, and coordination with Certified Defense Contractors to ensure compliance. You will also facilitate changes, maintenance approvals, and work alongside the Security Control Assessor (SCA) and Authorizing Official Designated Representative (AODR). Additionally, you will maintain organizational networks, manage accounts, audit systems, and conduct vulnerability scans. Your expertise will serve as a key resource, providing vital cybersecurity insights and guidance to civilian and military personnel, and senior leadership. You'll play an essential role in government inspections and audits, ensuring that all systems comply with the highest regulatory standards. Skills / Experience Required Top Secret with Sensitive Compartmented Information (TS/SCI) eligible May be required to consent to and successfully complete a Government Counterintelligence Scope Polygraph 10+ years of relevant experience within the Department of Defense 4+ years experience in SAP/SCI environment and worked in this environment within the last five years Ability to work in a dynamic environment with a diverse group of individuals focused on the accomplishment of a common objectives Provide recommendations to senior leadership to help ensure mission success Capable of conveying complex information in a simplistic manner Able to take proactive measures to prevent problems rather than reactive by nature Excellent written and oral interpersonal skills and attention to detail Strong critical thinking and problem-solving skills Education / Certifications Master of Arts/Master of Science/Master of Engineering in Computer Science, Cybersecurity, MIS, or related degree Relevant work experience/training certifications may be considered in lieu of a degree Minimum 1 year of experience using Risk Management Framework (RMF) IT security controls and policies Minimum DoD 8140/DoD 8570 IASAE Level II Certification Benefits Medical, dental, vision, disability, and life insurance Flexible Spending Accounts 401(k) PTO Paid Parental leave Tuition reimbursement Paid federal holidays Keenbee Talent Solutions is a Native Alaskan Women owned sdb specializing in the placement of highly skilled professionals in Accounting and Finance, IT/MIS and Biomedical. Keenbee has been in business since 1997 servicing New Mexico and the surrounding states with high results. Keenbee Talent Solutions is an equal opportunity employment agency. We do not discriminate based on race, color, national origin, religion, ancestry, sex, age, disability, serious medical condition, spousal affiliation, sexual orientation, gender identity, or other classifications protected under the law.

Salary Range: $71,310 - $115,000 Provide on-site Information System Security Officer (ISSO) and/or Information Assurance Officer (IAO) support to our F-35 customer. Essential Job Functions: Ensure proper Configuration Management procedures are followed prior to implementation and contingent upon an established approval process. Initiate requests for temporary and permanent exception, deviations, or waivers to IA requirements. Assure successful implementation and functionality of security requirements and appropriate IT policies and procedures that are consistent with the organization's mission and goals. Collect and maintain data needed to meet system IA reporting. Define and/or implement policies and procedures to ensure protection of critical infrastructure (as appropriate). Ensure plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc. Ensure that IA inspections, tests, and reviews are coordinated for the networked and stand alone. Ensure that IA requirements are integrated into the continuity planning for that system and/or organization(s). Evaluate and approve development efforts to ensure that baseline security safeguards are appropriately installed. Evaluate cost benefit, economic, and risk analysis in decision making process. Identify security requirements specific to an IT system in all phases of the System Life Cycle. Participate in an information security risk assessment during the Security Assessment and Authorization process. Participate in the acquisition process as necessary, following appropriate supply chain risk management practices. Participate in the development or modification of the computer environment IA security program plans and requirements. Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network system(s) operations. Provide system related input on IA security requirements to be included in statements of work and other appropriate procurement documents. Recognize a possible security violation and take appropriate action to report the incident, as required. Recommend resource allocations required to securely operate and maintain an organization. Supervise or manage protective or corrective measures when an IA incident or vulnerability is discovered. Support necessary compliance activities (e.g., ensure system security configuration guidelines are followed, compliance monitoring occurs, etc.) Coach and Mentor junior staff. Required Skills: Due to the sensitivity of customer related requirements, U.S. Citizenship is required . Bachelors degree with 5 years of relevant experience or a Masters degree plus 4 years of relevant experience. Will also consider a high school diploma plus 13 years of professional experience. Acquire and maintain security clearance and Single Scope Background Investigation (SSBI). Knowledge of Federal, DoD, and U.S. Navy Guidance. Experience with general IA Tools. Knowledge of Federal, DoD, and USMC Guidance (DoDD 8500.1, DoDI 8500.2), DITSCAP, DIACAP, NIACAP, NIST, and Certification Accreditation processes. DOD 8140 IAT Level II certification (Security+, CySA+, and CCNA-Security). Desired Skills: Top Secret Clearance. DOD 8140 IAT Level II certification (Security+, CySA+, and CCNA-Security). Knowledge of Risk Management Framework.