General Summary:
Performs system monitoring and analysis support for the detection of cyber incidents and provides recommendations on how to correct findings.
*Principal Duties and Responsibilities (Essential Functions):
- Monitors the network and supporting systems to detect security compromise events (including intrusions and virus incidents). *
- Provides network and security operations technical analysis, assessment, and recommendations.*
- Identifies where systems/networks deviate from acceptable configurations, enclave policy, or local policy.*
- Conducts audits to ensure information systems security policies and procedures are implemented as defined in security plans and best practices. *
- Performs detailed analyses to validate established security requirements and to recommend additional security requirements and safeguards.*
- Establishes strict program control processes and policies to ensure mitigation of risks and supports obtaining certification and accreditation of systems. *
- Supports the formal testing requirements through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.*
- Performs evaluations (compliance audits) and/or active evaluations (vulnerability assessments). *
- Conducts trend analysis of security events to identify anomalous malicious activity and repeat infection. *
- Provides leadership and threat mitigation training techniques to lower level employees.*
- Leads response teams to ensure any anomalies are corrected in accordance with government or industry standards.
_At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefitshere. _
Required Skills
Required Experience
Required Qualifications
- Bachelor’s degree in related field or equivalent experience, advanced degree preferred.
- Minimum of 3 related certifications may be used in place of unrelated degree field.
- Minimum of 10 plus years of work related experience.
- Certified Information Systems Security Professional (CISSP)
- Experience with Security Information and Event Management tools (SIEM)
- Knowledge and hands on experience with Cross-Domain and Zero Trust solutions/architectures.
- Experience with RMF packages
- Ability to clearly present and communicate technical approaches and findings.
- TS/SCI clearance; US Citizenship required;
Preferred Qualifications
- Previous experience as an ISSO or Cyber Security Manager
Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.