GuidePoint Security

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.Candidates MUST have be a US Citizen with an active Top Secret clearance for consideration (TS/SCI with Poly is preferred). This position is not remote.


 














The Security Control Assessor (SCA) will conduct and document a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an information system. Determine the overall control effectiveness through documentation review, inspections, testing, and interviews. Provide an assessment of the severity of weakness or deficiencies and recommend corrective actions to address identified vulnerabilities. Provide initial mitigation of Cybersecurity incidents, support incident investigations, and closure of the incidents. Provide assessment of proposed technology (hardware, software, and firmware) for Cybersecurity vulnerabilities.

Assessment of security controls and organizational requirements shall include:
<ul>
<li>Assessment Package Feedback which focuses on the documentation submitted to support the various steps of Risk Management Framework (RMF). Recommend a format for this document for government approval.</li>
<li>Security Assessment Report which focuses on the assessment of an information system in support of the authorization determination. Shall provide a draft report using the government provided template; may recommend format changes for government consideration.</li>
<li>Periodic Cybersecurity Assessment Report or Security Compliance Report which focuses on the assessment of a Cybersecurity program at a location. Shall provide a draft report using the government provided template; may recommend format changes for government consideration.</li>
<li>Cybersecurity Incident Reports which focus on documenting Cybersecurity incidents. Shall provide a draft report using the government provided template; may recommend format changes for government consideration.</li>
<li>Technical Assessment of Hardware, Software, or Firmware. Shall document the technical assessment addressing Cybersecurity vulnerabilities via a government agreed format, such as a Help Desk ticket application, electronic mail, memorandum, etc.</li>
<li>Shall develop an annual compilation of findings and observations based upon the Security Assessment Reports and Periodic Cybersecurity Assessment Reports or Security Compliance Reports based upon fiscal year assessments. The format shall be recommended for government approval. The compilation shall be void of system names, system identification numbers, government or contractor locations, and individual names.</li>
<li>Draft and/or preliminary documents shall be presented in one of the following electronic formats: Microsoft Office version 2007 compatible (.docx, .xlsx, or .pptx) or the standard Portable Document Format (PDF) format. Final and/or approved format shall be determined by the government; may recommend additional formats.</li>
<li>Incumbent travel requirements are approximately 30% annually to support critical business needs.</li>
</ul>
<h3>Qualifications</h3>
<ul>
<li>Shall have 4 or more years of experience in the validation of security configuration of operating systems.</li>
<li>Shall have 2 or more years of experience applying Risk Management Framework (RMF) as described in the National Institute of Standards and Technology Special Publications.</li>
<li>Shall meet the Cyber IT/Cybersecurity Workforce (CSWF) Security Control Assessor (612); Intermediate Level for SECNAV M-5239.2 compliance. </li>
</ul>

Travel Requirements:
Travel approximately 30% annually.
Education:
Bachelor Degree from accredited University; or
Certification:
Certified Authorization Professional (CAP); OR Cisco Certified Network Associate (CCNA) Routing and Switching; OR CompTIA Security+ ce
Desired Qualifications:
<ul>
<li>Strongly desired experience with application of the Defense Information Systems Agency (DISA) Security Technical Implementation Guides.</li>
<li>Operating System/Computing Environment certificate for Windows Server 2012 or newer UNIX (Linux (Red Hat), Solaris).</li>
<li>Experience with vulnerability scanners.</li>
<li>Experience with Cloud technologies.</li>
<li>Documented (certificate) RMF training provided by the Intelligence Community or DoD SAP community.</li>
<li>Experience with assessing security relevant applications.</li>
<li>Experience as a System Administrator, Information System Security Manager, or Information System Security Officer.</li>
<li>Experience applying the requirements of the DoD Joint Special Access Program Implementation Guide (JSIG) to information systems or Cybersecurity programs.</li>
<li>A cyber credential at the Master proficiency level for specialty area Securely Provision - Risk Management as outlined in SECNAV M-5239.2.</li>
<li>Experience with Cross Domain Solutions (CDS).</li>
</ul>
<h3>Security Clearance</h3>
This position will require U.S. citizenship and an active DoD Top Secret clearance. Candidate must be willing to obtain and pass a Counterintelligence (CI) Polygraph.
Why GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 700 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,000 Enterprise-Level customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)</li>
<li>100% employer-paid medical and dental premiums with generous employer family contributions</li>
<li>11 corporate holidays in 2022 (12 in 2023) and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
<li>Pet Care plan</li>
</ul>

Springfield

Security Control Assessor (SCA)

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.Candidates MUST have be a US Citizen with an active Top Secret clearance for consideration (TS/SCI with Poly is preferred). This position is not remote; work is 100% onsite in Springfield, VA.
The Information Systems Security Engineer (ISSE) supports the Information Technology (IT) Engineering team within the Systems Engineering and Architecture Services (SEAS) division as the Subject Matter Expert (SME) in the System Security Engineering (SSE), Cyber Resiliency, and the overall information system security engineering processes. The ISSE works directly with the Activity’s Information Security Architect (ISA), Enterprise Architects, and Systems Engineers (SEs) to ensure that SSE and Cyber Resiliency objectives, techniques, approaches, and design principles are fully represented and included in all systems engineering and development efforts. The ISSE's involvement is ever present throughout the systems development life cycle (SDLC) to include requirements definition, design, engineering, implementation, testing, validation, verification, continuous monitoring, and on-going vulnerability remediation for all information systems under the cognizance of the Activity's Chief Information Officer (CIO). The ISSE is ultimately responsible for protecting the CIO's information systems from unauthorized system activity or behavior to provide confidentiality, integrity, and availability.
Responsibilities of the ISSE include, but are not limited to:
<ul>
<li>Discover Information System Protection Needs through analyzing the Activity's mission; identifying legal and regulatory requirements; identify classes of threats; determining impacts against risk; identifying security services; documenting the protection needs; and identifying design constraints.</li>
<li>Define System Security Requirements by developing the system security context, Security Concept of Operations {CONOPs), and Security Requirements Baselines from the gathered Customer and Stakeholder requirements.</li>
<li>Design System Security Architecture by working with SEs in areas of functional analysis and allocation by analyzing candidate architectures, allocating security services, and selecting security mechanisms. The ISSE identifies components or elements, allocates security functions to those elements, and describes the relationships between the elements.</li>
<li>Develop Detailed Security Design by analyzing design constraints, analyzing trade-offs, generating detailed system and security design, with life-cycle support consideration.</li>
<li>Implement System Security from the hands-on approach to participation in a multidisciplinary examination of all systems issues that provides input to the Certification and Accreditation(C&amp;A) process activities.</li>
<li>Assess Information Protection Effectiveness by focusing on the effectiveness of the information protection whether the system can provide confidentiality, integrity, availability, authentication, and nonrepudiation for the information it is processing that is required for mission success.</li>
<li>Evaluate Commercial off the Shelf (COTS} and Government off the Shelf (GOTS} technologies - systems, applications, and services - against the Activity's INFOSEC and Cybersecurity requirements and needs.</li>
<li>Conduct INFOSEC and Cybersecurity assessment testing and reporting in accordance with the RMF and NIST 800 53; identifies deficiencies and documents them as Plans of Actions and Milestones (POA&amp;Ms) and provides recommendations for solutions in line with best practices and security industry standards.</li>
<li>Supports the A&amp;E SEs in the implementation, testing, and operational control (OPCON) transfer of INFOSEC and Cybersecurity related solutions the Activity's respective IT Operations and Maintenance (ITOM) teams.</li>
<li>Support the Activity's IT Change Management process by performing technical reviews of proposed and planned changes from the context of INFOSEC and Cybersecurity to identify risks and threats and support the remediation or mitigation prior to implementation.</li>
<li>Provides SME consulting services and escalated support to all aspects and groups of the Activity's IT organization, Stakeholders, and customer base in the specialty focus of SSE and Cyber Resiliency.</li>
<li>Provides mentorship and on the job training (OJT) to junior and/or lesser experienced personnel.</li>
</ul>
<h3>Qualifications</h3>
<ul>
<li>Shall be Comp TIA Advanced Security Practitioner (CASP+) or ISC2 Certified Information Systems Security Professional (CISSP) (or Associate) certified.</li>
<li>Shall have 7 or more years of progressive experience successfully leading the employment of SSE techniques, methodologies, processes, and practices to securely architect, design, engineer, implement, test, validate, verify, and deliver a variety of enterprise-grade IT solutions across multi-platform (i.e., Microsoft and *nix based) information systems in a secure manner.</li>
<li>Shall have 5 or more years of progressive experiencing personally driving Customer and Stakeholder system security requirements gathering exercises to discover, capture, analyze, and decompose the information protection needs such that formal system security requirements can be developed.</li>
<li>Shall have 5 or more years of experience in ingesting INFOSEC and Cybersecurity risks and threats, categorizing and classifying the risk and threat, evaluating remediation and mitigation alternatives, proposing, and defending your recommendation, implementing the final remediation, and testing and verifying the implemented remediation/mitigation addresses the identified threat to a Customer acceptable level.</li>
<li>Shall have 5 or more years of experiencing with supporting SSE activities in secure processing environments which must adhere to U.S. Government (USG) Information Assurance and Security standards such as the Defense Information Systems Agency (DISA) Security</li>
<li>Requirements Guides (SRGs) and Security Technical Implementation Guides (STIGs).</li>
<li>Shall have 3 or more years of hands-on experiencing using common INFOSEC and Cybersecurity tools in direct support of USG and Department of Defense (DOD) security and compliance efforts such as Tenable Nessus and Security Center, McAfee ePolicy Orchestrator (ePO), DISA's Security Compliance Checker (SCC) and Security Content Automation Protocol (SCAP) content.</li>
<li>Shall meet the minimum credential requirements for a Cyber IT/Cybersecurity Workforce (CSWF) position as defined in Section 6, Table 3.</li>
</ul>
Desired Qualifications:
<ul>
<li>Strongly desired to be ISC2 CISSP - Information Systems Security Engineering Professional (ISSEP) certified.</li>
<li>Technical certifications in industry standard enterprise level operating systems (OS), applications and technologies such as Microsoft, Nutanix, Red Hat, Splunk, and VMware are a plus.</li>
<li>Demonstrated experience employing Cyber resiliency engineering practices to include the methods, processes, modeling, and analytical techniques use to identify and analyze proposed cyber resiliency solutions.</li>
<li>Demonstrated experience working with the and securing current Microsoft technologies such as Active Directory Domain Services, Windows, Windows Server, Exchange, SQL Server, and IIS Server.</li>
<li>Demonstrated experience working with and securing current Red Hat technologies such as Red Hat Enterprise Linux, Satellite, Kickstart, and Ansible.</li>
<li>Demonstrated experience leveraging scripting (e.g., PowerShell, Python) and/or technologies (e.g., Ansible, Chef, Puppet, PowerShell Desired State Configuration (DSC) to automate the implementation, testing, verification, validation, and monitoring of system security configurations.</li>
<li>Demonstrated experience working with McAfee ePolicy Orchestrator and other enterprise-level McAfee products (Endpoint Security (ENS), Management for Optimized Virtual Environments (MOVE), VirusScan Enterprise for Storage (VSES), etc.) to secure USG DOD multi-platform information systems.</li>
<li>Demonstrated experience working with DevSecOps Engineers, Software Developers, and Software Engineers and a combination of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools to secure application and coding practices.</li>
<li>Demonstrated experience working closely with Information System Security Officers (ISSOs) to support inspection, investigation, validation, and C&amp;A activities.</li>
<li>Experienced directly supporting the DoDI 8510.01, Risk Management Framework (RMF) for Department of Defense (DOD) IT.</li>
<li>Familiarity with National Institute of Standards and Technology (NIST) Special Publication 800- 160 Volume 1: Systems Security Engineering.</li>
<li>Familiarity with NIST Special Publication 800-160 Volume 2: Developing Cyber Resilient Systems.</li>
<li>Familiarity with the NSA Information Assurance Technical Framework (IATF).</li>
</ul>

Requests for reasonable accommodations will be considered to enable individuals with disabilities to perform the principal (essential) functions of this job.
<h3>Security Clearance</h3>
<ul>
<li>This position requires U.S. Citizenship and an active DoD TS/SCI clearance with the ability to obtain a CI Poly.</li>
</ul>
Why GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 700 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,000 Enterprise-Level customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)</li>
<li>100% employer-paid medical and dental premiums with generous employer family contributions</li>
<li>11 corporate holidays in 2022 (12 in 2023) and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
<li>Pet Care plan</li>
</ul>

Information Systems Security Engineer (ISSE)

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.An active Top Secret with SCI clearance (must be US Citizen; TS/SCI with a polygraph is preferred) is required prior to consideration for this role. 
Work is 100% onsite. We need Network Security Engineers for multiple government sites throughout northern Virginia and southern Maryland.
A Network Security Engineer is part of a team of skilled Cybersecurity professionals that support the design, build, and sustainment of network based cyber defense capabilities within the organization. Network Security Engineers interact daily with a wide variety of industry leading network security products including, but not limited to, firewalls, Intrusion prevention systems, full packet capture solutions, mail gateways, advanced malware defense systems, and TLS inspection solutions. Network Security Engineers provide support to fellow stakeholders when integrating new Cybersecurity requirements into the enterprise and maintain all production network security solutions that are servicing the organization. When required, Network Security Engineers support fellow stakeholders in resolving network connectivity issues.
<h3>What You'll Get To Do:</h3>
<ul>
<li>
Participate on a team of skilled network security engineers responsible for the ingratiation, operations, and sustainment of a suite of enterprise class Cybersecurity technologies
</li>
<li>
Perform the planning and implementing policy changes on next generation firewalls
</li>
<li>
Assists in the analyses and design of a world wide network security architecture
</li>
<li>
Administer configuration changes on enterprise load balancers that include enterprise TLS break/inspect
</li>
<li>
Work focused special projects both independently and within a group
</li>
<li>
Participate in the investigation and documentation of security related incidents
</li>
<li>
Implement corrective measures in response to emerging network security threats
</li>
<li>
Brief senior contract leadership and government stakeholders on the current status of the enterprise network security posture
</li>
</ul>
<h3>You'll Bring These Qualifications:</h3>
<ul>
<li>
Related technical experience in network security technologies such as Juniper SRX, Palo Alto Strata, F5 Load Balancer (ASM is a plus), Cisco FTD/ASA, Gigamon, FireEye, and RSA Netwitness
</li>
<li>
TS/SCI Clearance
</li>
<li>
DOD 8570 IAT Level II certification. (security+ minimum to start)
</li>
</ul>Why GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 700 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,000 Enterprise-Level customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)</li>
<li>100% employer-paid medical and dental premiums with generous employer family contributions</li>
<li>11 corporate holidays in 2022 (12 in 2023) and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
<li>Pet Care plan</li>
</ul>

Network Security Engineer

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.The position is onsite in Springfield, VA, and requires an active TS/SCI for consideration. A CI polygraph is also required within 6 months.  This position is not remote.
A Cyber Threat Hunter is part of a team of skilled Cybersecurity professionals that support the design, build, and sustainment of the Cyber-Security Operation Center (CSOC) within the organization. Hunt Team Members interact daily and provide support to the overall CSOC through a wide variety of industry leading capabilities and data sets to include Endpoint Telemetry data, Live Network Packet Capture, IDS/IPS, Security Orchestration, Automation, and Response (SOAR), Cyber Threat Emulation (CTE), and Data Analytics Platforms.  
What You’ll Get to Do:
<ul>
<li>Perform proactive detection of advanced threat actors within the network</li>
<li>Uncover visibility gaps, while working with the network monitoring and advanced analytics teams to improve detection capabilities and security controls</li>
<li>Research new security topics (mostly based on MITRE ATT&amp;CK Framework), develop and test your hypotheses, and share your knowledge and findings with teammates as well as management</li>
<li>Responsible for creating detailed reports on Hunt mission findings for the customer</li>
<li>Responsible for developing and maintaining standard processes and operating procedures, creating technical architecture diagrams and system build documentation</li>
</ul>
You’ll Bring These Qualifications:
<ul>
<li>Bachelor’s Degree in a Technical field (i.e. Information Technology, Information Systems,Computer Science)</li>
<li>4+ years of experience within a Cyber Security Operation Center or as an Intelligence Officer</li>
<li>2+ years’ experience supporting security incidents response activities</li>
<li>Solid understanding of threat actors, threat campaigns, malware analysis, and/or DFIR while keeping up to date on the latest innovation in cybersecurity</li>
<li>Ability to brief Sr. Leadership to include SOC Director’s, CISO’s or Agency Director</li>
<li>Solid writing skills and ability to create threat diagrams as needed</li>
<li>DoD 8140.01 and DoD 8570.01-M.IAT Level III Certification</li>
<li>Experience utilizing SIEM or Data Analytics capability (e.g. ELK, ArcSight, or Splunk)</li>
<li>Experience utilizing endpoint security technologies (e.g. CarbonBlack, Endgame, or FireEye HX)</li>
<li>Understanding of the MITRE ATT&amp;CK framework and deep understanding of the tactics,techniques and procedures within the ATT&amp;CK framework</li>
<li>Multi-tasker who is able to work effectively on a team, as well as independently, with minimal supervision</li>
</ul>
These Qualifications Would be Nice to Have:
<ul>
<li>Master’s Degree in a Technical field, Political Science, Business Intelligence, Data Science, or Intelligence Analysis</li>
<li>Strong understanding of Indicators of Compromise (IOC) (e.g. YARA, STIX)</li>
<li>Experiences with Maltego, Analyst Notebook, or Analyst Platform</li>
<li>Scripting skills (BASH, Python, PowerShell)</li>
<li>Desirable certifications include, but not limited to: CISSP, GCIH, GCIA, GCFE, GREM, GCFA, GSEC, CEH, or equivalent Certifications</li>
</ul>Why GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 700 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,000 Enterprise-Level customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)</li>
<li>100% employer-paid medical and dental premiums with generous employer family contributions</li>
<li>11 corporate holidays in 2022 (12 in 2023) and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
<li>Pet Care plan</li>
</ul>

Threat Hunt Analyst (TS/SCI)

Apply to Cyber Security Jobs in Springfield in companies remotely and near you. New Cyber Security Jobs in Springfield added daily.

Job Position and Company	Location	Tags	Posted
Security Control Assessor (SCA) at GuidePoint Security	Remote Full Time Comptia Administrator Manager
Information Systems Security Engineer (ISSE) at GuidePoint Security	Remote Full Time Chief Devsecops Consulting
Network Security Engineer at GuidePoint Security	Remote Full Time Contract DOD
Security Control Assessor (SCA) at GuidePoint Security	Remote Full Time Comptia Administrator Manager
Threat Hunt Analyst (TS/SCI) at GuidePoint Security	Remote Full Time CISO Analyst DOD

Cyber Security Jobs in Springfield

0 Cyber Security Jobs in Springfield. Page 1 of 1

5 closed cyber security jobs in springfield:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Springfield

0 Cyber Security Jobs in Springfield. Page 1 of 1

5 closed cyber security jobs in springfield:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter