What is the salary for this Cybersecurity SME role?

Salary information is not publicly listed for this position. Apply directly to discuss compensation with Threat Tec, LLC.

Where is this Cybersecurity SME position located?

This is an on-site position at Threat Tec, LLC located in Newport News, VA.

How do I apply for this Cybersecurity SME job at Threat Tec, LLC?

Click the 'Apply' button on this page to be redirected to Threat Tec, LLC's application portal. Make sure to have your resume ready and tailor your application to highlight relevant experience.

What is Threat Tec, LLC?

Threat Tec, LLC is actively hiring for Security roles. Visit the company page to see all open positions and learn more about working at Threat Tec, LLC.

Cybersecurity SME

Threat Tec, LLC Newport News, VA 7 days ago

security

Position Summary

Threat Tec has an immediate opening for a Cybersecurity SME in support of a Department of War (DoW) Transformation and Training Command (T2COM G2) at Fort Eustis, Virginia. In this role, you will be responsible for ensuring the required operational security posture is maintained for various DoW information systems and networks. You will lead the evaluation and implementation of advanced security technologies, including cross domain solutions, zero trust architectures and cloud security controls. You will play an active role in monitoring systems and their environment of operation to include managing and maintaining inputs to eMASS (Enterprise Mission Assurance Support Service) used for comprehensive cybersecurity management.

Duties & Responsibilities - The duties and responsibilities described below are typical though not necessarily all inclusive.

Work closely with T2COM G2 Cybersecurity and IT Services departments to establish and administer appropriate security systems, policies, standards, and procedures in compliance with applicable government directives and guidelines.

Ensure network security and compliance on business operational network in accordance with Army and DoW polices and best practices.

Review compliance with DoD 8140, NIST SP 800-53, C&A, POAMS and other audit and security requirements, when applicable, for customer supported infrastructure.

Maintain inputs to eMASS as the centralized cybersecurity management platform for the full spectrum of cybersecurity management activities.

Integrate the Risk Management Framework (RMF) process Ensures security policies, standards, and procedures are enforced

Develop POAMs (Plan of Action and Milestones) for essential tracking of corrective actions that help the government manage and mitigate risks effectively and maintain firewalls and other security and intrusion detection devices.

Optimize IT infrastructure auditing and monitoring capability to analyze incident and event notifications

Generate required compliance reports to include RMF authorization packages and DoD Cybersecurity Scorecards that provide visibility of enterprise level cybersecurity posture. and verify COOP/DR capabilities for the business operational network theater wide.

Update and maintain procedures for operation of secure IT assets

Establish knowledge sharing, standardized practices and process improvement and review effectiveness of security awareness and education programs for DoD government and contractor employees.

Maintain awareness of changes to DoD cybersecurity and other applicable policies and update local policies as needed.

Review system security audit logs on standalone and networked systems.

Ensure systems are operated, maintained, and disposed of in accordance with DoD and local security policies and procedures.

Support Information System Incident Response in accordance with the DoD and local Incident Response Plan.

Support enterprise DevSecOps and SDLC standards for an enterprise application development platform.

Minimum Qualifications

Six (6) years of experience in cybersecurity, with a proven track record in risk management, threat mitigation, and security strategy development.

At least 2 years previous experience as an ISSO/ISSM or another organizational equivalent.

Possess certified DoD 8140 certifications to specific roles within the DoD Cyber Workforce Framework (DCWF). Validated mapping of required skills, certifications, and qualifications and workforce categories/functions of Cybersecurity, Intelligence (Cyberspace) and IT (Cyberspace). CompTIA Security+ (for foundational cybersecurity knowledge); Certified Information Systems Security Professional (CISSP) (for advanced cybersecurity professionals); Certified Ethical Hacker (CEH) (for ethical hacking and penetration testing); and Certified Cloud Security Professional (CCSP) (for cloud security roles).

Proven oral and written communications skills including presentation development and delivery for clients

Ability to obtain and maintain an active Top Secret with SCI eligibility