Halvik

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Job Description:Performs assessment and authorization coordination. Advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving network deficiencies in accordance with DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a> and ICD 503. The duties of this task include assessing network compliance against controls listed in NIST 800-53 and creating A&amp;A packages. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at USSOCOM, its Component Commands, TSOCs, and deployed forces. The Contractor shall execute a comprehensive assessment, compliance and validation of customer networks to ensure compliance with regulations and security and standards. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation courses of action, and operational. Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. The Cybersecurity Systems Analyst will liaison with network and system administrators to correct identified deficiencies. The Cybersecurity Systems Analyst will also scan (or review scans) for new systems and applications being introduced into the SOF environment, identify issues, and draft certification letters for the government. The contractor will liaison with the Site Integration Facility (SIF) to ensure systems and application meet the standards in the DISA Security Technical Implementation Guides (STIG). The Cybersecurity Systems analyst should be knowledgeable of cyber network defense tools such as end point security, SIEM, comply to connect, etc. Typical duties include:  Tracks A&amp;A status of SIE governed ISs. Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.  Advises stakeholders on the adequacy of implementation of cybersecurity requirements.  Provide DoD &amp; IC RMF subject matter expertise to USSOCOM, its Component Commands, TSOCs, deployed forces and their delegates, including other Contractors, and assist with the development and execution of the RMF program at USSOCOM, its Component Commands, TSOCs, and deployed forces.  Maintain, track, and validate DISN, cloud and DIA connection approval packages, including those from USSOCOM, its Component Commands, TSOCs, and other subordinate organizations.  Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems and technologies as they are introduced into the SIE.  Develop and review the A&amp;A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD &amp; IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC).  Perform risk and vulnerability assessments of IT and IS for authorization; prepare risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.  Assist USSOCOM, its Component Commands, TSOCs and deployed forces with the enforcement of A&amp;A, as well as DoD, DIA, USSOCOM, Component Command, TSOC, and deployed forces’ connection standards for networks and systems.  Track and maintain A&amp;A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.  Track and report to higher headquarters organizations (e.g. USCYBERCOM, DIA) compliance with applicable Cybersecurity regulations and directives.  Ensure timely notifications are made to responsible individuals and organizations in order to prevent lapses in accreditations (e.g., 30, 60, and 90 day notices).  Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.  Identify, assess, and advise on cybersecurity control compliance and associated risks.  Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&amp;A, connection approvals, and waiver requests.  Perform network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.  Validate the patching of systems, perform validation scanning, develop Plans of Action &amp; Milestone (POA&amp;Ms), and report as directed by applicable policies, procedures, and regulations.  Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.  Develop and implement required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.  Identify, implement and validate continued effectiveness of key performance parameters and applied security measures  Perform analytics on cybersecurity posture and provide reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction. Knowledge, Skills and Abilities:  Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired.  Technical background with system administration experience, architecture and engineering preferred  Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility  Working knowledge of the RMF.  Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired.  Must have excellent communications skill (written and oral) and interpersonal skills.  Knowledge and experience with DoD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies, Chairman of the Joint Chiefs of Staff Manual (CJCSM) <a href="http://65101.01" rel="noopener noreferrer nofollow ugc" target="_blank">65101.01</a>, Incident Response and other IA policies).  Active TS/SCI clearance required. IAT Level III or IAM Level III required10+ years of experienceHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Fort Bragg

Cybersecurity Systems Analyst - Expert

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Cybersecurity Systems Analyst Performs assessment and authorization coordination. Advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving network deficiencies in accordance with DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a> and ICD 503. The duties of this task include assessing network compliance against controls listed in NIST 800-53 and creating A&amp;A packages. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at USSOCOM, its component Commands, TSOCs, and deployed forces. The Contractor shall execute a comprehensive assessment, compliance and validation of customer networks to ensure compliance with regulations and security and standards. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation courses of action, and operational. Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. The Cybersecurity Systems Analyst will liaison with network and system administrators to correct identified deficiencies. The Cybersecurity Systems Analyst will also scan (or review scans) for new systems and applications being introduced into the SOF environment, identify issues, and draft certification letters for the government. The contractor will liaison with the Site Integration Facility (SIF) to ensure systems and application meet the standards in the DISA Security Technical Implementation Guides (STIG). The Cybersecurity Systems analyst should be knowledgeable of cyber network defense tools such as end point security, SIEM, comply to connect, etc. Typical duties include:  Tracks A&amp;A status of SIE governed ISs. Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.  Advises stakeholders on the adequacy of implementation of cybersecurity requirements.  Provide DoD &amp; IC RMF subject matter expertise to USSOCOM, its Component Commands, TSOCs, deployed forces and their delegates, including other Contractors, and assist with the development and execution of the RMF program at USSOCOM, its Component Commands, TSOCs, and deployed forces.  Maintain, track, and validate DISN, cloud and DIA connection approval packages, including those from USSOCOM, its Component Commands, TSOCs, and other subordinate organizations.  Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems and technologies as they are introduced into the SIE.  Develop and review the A&amp;A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD &amp; IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC).  Perform risk and vulnerability assessments of IT and IS for authorization; prepare risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.  Assist USSOCOM, its Component Commands, TSOCs and deployed forces with the enforcement of A&amp;A, as well as DoD, DIA, USSOCOM, Component Command, TSOC, and deployed forces’ connection standards for networks and systems.  Track and maintain A&amp;A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.  Track and report to higher headquarters organizations (e.g. USCYBERCOM, DIA) compliance with applicable Cybersecurity regulations and directives.  Ensure timely notifications are made to responsible individuals and organization in order to prevent lapses in accreditations (e.g., 30,60, and90 day notices).  Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.  Identify, assess, and advise on cybersecurity control compliance and associated risks. Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&amp;A, connection approvals, and waiver requests.  Perform network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.  Validate the patching of systems, perform validation scanning, develop Plans of Action &amp; Milestone (POA&amp;Ms), and report as directed by applicable policies, procedures, and regulations.  Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.  Develop and implement required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.  Identify, implement and validate continued effectiveness of key performance parameters and applied security measures  Perform analytics on cybersecurity posture and provide reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction. Knowledge, Skills and Abilities: Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired. Technical background with system administration experience, architecture and engineering preferred Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility Working knowledge of the RMF. Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired. Must have excellent communications skill (written and oral) and interpersonal skills. Knowledge and experience with DoD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies, Chairman of the Joint Chiefs of Staff Manual (CJCSM) <a href="http://65101.01" rel="noopener noreferrer nofollow ugc" target="_blank">65101.01</a>, Incident Response and other IA policies). Active TS/SCI clearance required. DoD 8570 IAM III certification (CISM, CISSP / CISSP Associate, GSLC, or CCISO) MA/MS degree5+ years of experienceHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Cybersecurity Systems Analyst - Intermediate

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Job Description:Performs assessment and authorization coordination. Advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving network deficiencies in accordance with DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a> and ICD 503. The duties of this task include assessing network compliance against controls listed in NIST 800-53 and creating A&amp;A packages. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at USSOCOM, its Component Commands, TSOCs, and deployed forces. The Contractor shall execute a comprehensive assessment, compliance and validation of customer networks to ensure compliance with regulations and security and standards. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation courses of action, and operational. Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. The Cybersecurity Systems Analyst will liaison with network and system administrators to correct identified deficiencies. The Cybersecurity Systems Analyst will also scan (or review scans) for new systems and applications being introduced into the SOF environment, identify issues, and draft certification letters for the government. The contractor will liaison with the Site Integration Facility (SIF) to ensure systems and application meet the standards in the DISA Security Technical Implementation Guides (STIG). The Cybersecurity Systems analyst should be knowledgeable of cyber network defense tools such as end point security, SIEM, comply to connect, etc. Typical duties include:  Tracks A&amp;A status of SIE governed ISs. Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.  Advises stakeholders on the adequacy of implementation of cybersecurity requirements.  Provide DoD &amp; IC RMF subject matter expertise to USSOCOM, its Component Commands, TSOCs, deployed forces and their delegates, including other Contractors, and assist with the development and execution of the RMF program at USSOCOM, its Component Commands, TSOCs, and deployed forces.  Maintain, track, and validate DISN, cloud and DIA connection approval packages, including those from USSOCOM, its Component Commands, TSOCs, and other subordinate organizations.  Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems and technologies as they are introduced into the SIE.  Develop and review the A&amp;A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD &amp; IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC).  Perform risk and vulnerability assessments of IT and IS for authorization; prepare risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.  Assist USSOCOM, its Component Commands, TSOCs and deployed forces with the enforcement of A&amp;A, as well as DoD, DIA, USSOCOM, Component Command, TSOC, and deployed forces’ connection standards for networks and systems.  Track and maintain A&amp;A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.  Track and report to higher headquarters organizations (e.g. USCYBERCOM, DIA) compliance with applicable Cybersecurity regulations and directives.  Ensure timely notifications are made to responsible individuals and organizations in order to prevent lapses in accreditations (e.g., 30, 60, and 90 day notices).  Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.  Identify, assess, and advise on cybersecurity control compliance and associated risks.  Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&amp;A, connection approvals, and waiver requests.  Perform network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.  Validate the patching of systems, perform validation scanning, develop Plans of Action &amp; Milestone (POA&amp;Ms), and report as directed by applicable policies, procedures, and regulations.  Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.  Develop and implement required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.  Identify, implement and validate continued effectiveness of key performance parameters and applied security measures  Perform analytics on cybersecurity posture and provide reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction. Knowledge, Skills and Abilities:  Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired.  Technical background with system administration experience, architecture and engineering preferred  Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility  Working knowledge of the RMF.  Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired.  Must have excellent communications skill (written and oral) and interpersonal skills.  Knowledge and experience with DoD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies, Chairman of the Joint Chiefs of Staff Manual (CJCSM) <a href="http://65101.01" rel="noopener noreferrer nofollow ugc" target="_blank">65101.01</a>, Incident Response and other IA policies).  Active TS/SCI clearance required. IAT Level III or IAM Level III requiredHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Cybersecurity Systems Analyst

Sigma Defense

Sigma Defense Systems is a leading technology company serving the Department of Defense (DoD), providing tactical communications systems and services for digital modernization since 2006. Through our acquisitions of SOLUTE in January 2022 and Sub U Systems in May 2022, we have expanded our software and communications hardware solutions to better support JADC2, C5ISR, SATCOM, and DEVSECOPS for customers in the Army, Navy, Air Force, Marine Corps, and Space Force. Through a combination of hardware, software, and industry expertise, we provide a complete portfolio of solutions and services that accelerates information collection and sharing for faster decision making and better mission outcomes.We are a company of innovative professionals thriving in a highly motivating work environment that fosters creativity and independent thinking. If you are a motivated individual with a desire to support our service men and women, now is a great time to join Sigma Defense!This position will provide cybersecurity support services and Risk Management Framework (RMF) subject matter expertise to the United States Special Operations Command (USSOCOM) Airborne Intelligence, Surveillance and Reconnaissance Transport (AISR-T) program in accordance with DoD and USSOCOM policies and Special Operations Forces Acquisition, Technology and Logistics (SOF AT&amp;L) Program Executive Office Command, Control, Computer and Communications (PEO-C4) directives and regulations.Supports the AISR-T program as the Information System Security Officer (ISSO) for the Pope Regional Ground Entry Point (RGEP) site and AISR-T systems and capabilities tested, integrated and maintained by the Pope Engineering Cell, by ensuring they meet cybersecurity requirements in accordance will DoD Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT), including access control, training and awareness, secure systems design, media protection, cryptographic protection, information system monitoring, incident response, network boundary protection, operations security, endpoint security, anti-tamper/supply chain risk management, software assurance, and anti-counterfeit practices. Defines system-specific security control baselines by selecting and tailoring National Institute of Standards and Technology (NIST) Special Publication 800-53 security controls based on the Confidentiality-Integrity-Availability (C-I-A) impact levels of the information and information systems, and by applying any applicable overlays in accordance with Committee on National Security Systems Instruction (CNSSI) 1253. Develops RMF Security Authorization Packages for review and approval by the United States Special Operations Command (USSOCOM) Security Control Assessor (SCA) and Authorizing Official (AO) in order to obtain Interim Authorizations to Test (IATT) or Authorizations to operate (ATO) for the systems under their purview. • Processes, manages, and maintains all Assessment and Authorization (A&amp;A) documentation during the entire information system life cycle using the Enterprise Mission Assurance Support Service (eMASS), to include the Control Implementation Plan, Security Assessment Report (SAR), Plan of Action and Milestones (POA&amp;M), and any supporting evidence and analysis. Performs continuous monitoring and addresses changes in threats, vulnerabilities, and predisposing conditions in the operational environment. Ensures that the appropriate operational security posture is maintained for the Pope site and the systems and capabilities under the Pope Engineering Cell purview, working in close collaboration with the information system owner (ISO), and the information system security engineers (ISSE). Serves as a principal advisor on all matters, technical and otherwise, involving the security of the Pope site and information systems. Plays an active role in the monitoring of the Pope systems and their environment of operation, to include developing and updating security plans; managing and controlling changes to the system; and assessing the security impact of those changes. Ensures systems are operated, maintained, and disposed of IAW security policies and procedures as outlined in the security authorization package. Attends required technical and security training (e.g., operating system, networking, security management) relative to assigned duties. • Reports all security-related incidents to the AISR-T Information System Security Manager (ISSM). Conducts periodic reviews of the systems under their purview to ensure compliance with the security authorization package. May serve as a member of the AISR-T Configuration Control Board. Coordinates any changes or modifications to hardware, software, or firmware of a system with the SCA and ISSM prior to the change. Formally notifies the ISSM and SCA when changes occur that might affect site or system authorizations. Ensures all system security-related documentation is current and accessible to properly authorized individuals. Maintains required cybersecurity certifications. Requirements<ul> <li>Excellent communication skills, both written and oral </li> <li> Strong interpersonal skills – team and customer-service oriented </li> <li>Strict attention to detail </li> <li> Strong organization, facilitation, and time management skills </li> <li> Ability to multi-task effectively, prioritize, and execute against multiple priorities</li> <li> Ability to work independently and with others </li> <li>Demonstrated research and analytical skills </li> <li>Ability to generate recommendations based on rigorous analysis and logical arguments</li> <li> Ability to produce thorough, exhaustive and accurate A&amp;A documentation </li> <li>Ability to produce and present executive-level briefings to program leadership </li> <li>Ability to take initiative </li> <li>Ability to learn independently </li> <li>Ability to process large amounts of data in order to extract and assimilate key points </li> <li>Skilled in Microsoft Office Suite including Word, Excel, Power Point and Visio </li> <li>Experienced in cybersecurity compliance assessment tools and security information and event management data platforms: Assured Compliance Assessment Solution (ACAS); Security Content Automation Protocol (SCAP) Compliance Checker (SCC); eMASS; STIG Viewer. </li> </ul>Essential Job Responsibilities (not all- inclusive)<ul> <li>Perform all A&amp;A Configuration Management-related tasks in a thorough, reliable and timely manner for all capabilities under their purview </li> <li> Monitor system compliance utilizing ACAS and other remote monitoring/auditing tools and report to the ISSM </li> <li> Oversee and assist Pope ISSEs in vulnerability management activities </li> <li> Produce comprehensive and accurate quarterly release baselines for systems under their purview</li> <li> Support test and evaluation activities in accordance with AISR-T processes </li> <li> Maintain site security SOPs up to date and perform site inspections and audits as part of Continuous Monitoring </li> <li> Maintain site and system artifacts, to include diagrams </li> </ul>Benefits<ul> <li>401(k) Match</li> <li>Medical, Dental, Vision, and more</li> <li>Highly Competitive Salary</li> <li>Educational Reimbursement</li> <li>Paid Time Off &amp; Paid Holidays</li> We are an equal opportunity employer. All applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, marital status, veteran status or any other applicable legally protected status or characteristic. </ul>

Fayetteville

Senior Information Systems Security Officer (ISSO)

GuidePoint Security

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.SummaryAs a Sr. Security Engineer, you will be working as part of a team of engineers providing delivery support for customers in several verticals including retail, finance/banking, healthcare and more. You will work as part of a team focused on security operations principles and optimization with an emphasis on security incident and event monitoring (SIEM).  While the job will predominantly involve delivery work for customers, you will also be expected to participate in pre-sales engagements alongside account executives in the Mid-Atlantic region. You will be working as part of a team with a shared responsibility to further developing programs for customers centered around SIEM and SOC optimization. You will lead presentations with technical fluency and be able to answer customer questions in multiple areas of SOC/SIEM optimization.  You will also be writing technical documentation and occasionally give technical presentations as a SOC/SIEM subject matter expert. Role and responsibilities
Security Incident and Event Monitoring technology support for vendors tools such as IBM Security QRadar and QRadar on Cloud (QRoC), Splunk Cloud Enterprise, Sumo Logic, Securonix, Exabeam, Rapid7, LogRhythm, and/or Microsoft Sentinel
<ul>
<li>Security Operations Center experience in the following areas:
<ul>
<li>Playbook design and editing</li>
<li>Workflow process creation</li>
<li>Alert and incident response</li>
<li>SIEM deployment, administration, and architecture design</li>
</ul>
</li>
<li>SOAR experience in deployment and architecture design preferred</li>
<li>Experience with Insider Threat program design and implementation preferred</li>
<li>Understanding of EDR, NDR, and next gen firewall alerts and logging criteria in a security operations center.</li>
</ul>
 Required Experience
<ul>
<li>Senior security operations analyst/engineer with at least 6 years’ experience in security operations with emphasis on but not limited to the following technical criteria:
<ul>
<li>SIEM (security incident and event monitoring) administration, deployment, and/or architectural design on-premise/cloud based</li>
<li>Data analytics (cloud based experience preferred)</li>
<li>Security orchestration automation and response with playbook/workflow/process design and implementation</li>
<li>Familiarity with cybersecurity tools from the perspective of responding to and mitigating risk from within a formalized security operations center environment such as:</li>
</ul>
</li>
<li>Network/Endpoint/Extended Detection and Response (NDR/EDR/XDR)</li>
<li>Web Application Firewall (WAF), Next Generation Firewall (NGFW) including but limited to URL filtering and traffic analyses</li>
<li>Network Access Control (NAC), Secure Access Service Edge (SASE)</li>
<li>Identity/Privilege Access Management</li>
<li>Understanding of Zero-Trust and associated technologies User and/or Entity Behavioral Analysis (U/EBA)</li>
<li>Understanding of Digital Forensics and Incident Response (DFIR)</li>
<li>Team player, works well with others and open to constructive criticism with the intention to always provide value on all customer engagements</li>
<li>Willingness to work with multiple customers who may have differing requirements</li>
<li>Administration, design, and tracking of key metrics to facilitate and report on strategic security operations functions that impact overall business continuity</li>
<li>Knowledge of and experience with security frameworks such as NIST, CIS, and MITRE ATT&amp;CK</li>
</ul>
Nice to have skill set and experience:
<ul>
<li>Microsoft Azure Security Center / Defender with Microsoft Sentinel and Log Analytics</li>
<li>AWS Cloud trail logging and more</li>
<li>Python/PowerShell or similar coding relative to cybersecurity skill sets</li>
<li>Regular expressions, field extraction rules, JSON and/or XML (XPath queries)</li>
<li>Vulnerability management</li>
<li>Experience leading meetings and presentations for management and executive level personnel.</li>
<li>Insider threat program design and/or facilitation</li>
</ul>
Why GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 700 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,000 Enterprise-Level customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)</li>
<li>100% employer-paid medical and dental premiums with generous employer family contributions</li>
<li>11 corporate holidays in 2022 (12 in 2023) and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
<li>Pet Care plan</li>
</ul>

Charlotte

Senior Security Engineer (SOC/SIEM Optimization) - Mid-Atlantic Region (Remote)

Apply to Cyber Security Jobs in Carolina in companies remotely and near you. New Cyber Security Jobs in Carolina added daily.

Job Position and Company	Location	Tags	Posted
Cybersecurity Systems Analyst - Expert at Halvik	Full Time Analyst Incident Response DOD
Cybersecurity Systems Analyst - Intermediate at Halvik	Full Time CISM CISO Analyst Incident Response
Cybersecurity Systems Analyst at Halvik	Full Time Analyst Incident Response DOD
Senior Information Systems Security Officer (ISSO) at Sigma Defense	Remote Full Time Manager Incident Response Devsecops
Senior Security Engineer (SOC/SIEM Optimization) - Mid-Atlantic Region (Remote) at GuidePoint Security	Remote Full Time CISM Analyst Incident Response

Cyber Security Jobs in Carolina

0 Cyber Security Jobs in Carolina. Page 1 of 1

5 closed cyber security jobs in carolina:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Carolina

0 Cyber Security Jobs in Carolina. Page 1 of 1

5 closed cyber security jobs in carolina:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter