Cybersecurity SME; Junior Security Clearance

Position: Cybersecurity SME (Junior) with Security Clearance
Summary Cybersecurity SME JR Alexandria, VA Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!

The Cybersecurity SME is a key contract personnel who provides expert guidance and technical leadership, leading the contractor cybersecurity personnel, supporting, and representing the AGC Information System Security Manager (ISSM) in customer and management/leadership meetings for the area of cybersecurity. Responsibilities
* Report on and perform Continuous Monitoring on all AGC-supported systems and networks; identify, mitigate, and resolve cybersecurity incident issues and concerns
* Develop guidelines/plans, analyses, reviews, and mitigations in the areas of security incident response and mitigation strategies, vulnerability scanning, writing security assessments, and other cybersecurity-related activities and mandates
* Respond to all cybersecurity notices as directed by the Cyber Security Service Provider (CSSP) and pertinent service providers, take action to comply with security notices, and record compliance
* Provide technical support, including documentation, to enable required AGC systems to meet the requirements of receiving an Authority to Operate (ATO) accreditation decision via the Department of Defense (DoD) Risk Management Framework (RMF)
* Support operational cybersecurity activities, including vulnerability scanning, IAVM compliance, STIG and SRG application, assessment, and remediation, and POA&Ms
* Support cybersecurity governance, risk, and compliance by providing plans, policies, and procedures relevant to AGC's systems, applications, and networks, including AGC Gov Cloud (L2/L4), and other accredited systems/applications.
* Manage accreditation and continuously monitor activities, as well as the vulnerability management and incident response functions for all supported systems and networks.
* Support operational cybersecurity activities, including vulnerability scanning, IAVM compliance, STIG and SRG application, assessment, and remediation, and POA&M.
* Support cybersecurity governance, risk, and compliance by providing plans, policies, and procedures relevant to AGC's systems, applications, and networks, including AGGC-R Cloud and/or AGC Army AWS Cloud, C2IE, OHASIS.
* Maintains AGC's Tenant Security Plans (TSP) for SIPR and NIPR, Authority to Operate (ATO) for JWICS and Interim Authority to Test (IATT), Approval to Connect (ATC), and any other documentation necessary to support AGC's network connections and mission systems.
* Manage the eMASS records for AGC's mission systems and enclaves, create and track POA&Ms, track IAVM and STIG compliance, and manage eMASS artifacts necessary to support evidence for applicable security controls.
* Support RMF activities, including categorization of systems IAW NIST SP 800-60, selection of security controls IAW CNSSI 1253 and NIST SP 800-53, assessment of security controls IAW NIST SP 800-53A, development and implementation of Continuous Monitoring Plans IAW NIST SP800-137, STIG Traceability Matrix, hardware/software/firmware list, and System Security Plan (SSP).
* Participate in the configuration process (CM) through representation on the Technical Review Board (TRB) and Configuration Control Board (CCB) and provide a security impact assessment for changes submitted through Request for Change (RFCs).
* Responsible for the continuous monitoring of AGC's systems, applications, and networks
* Configure vulnerability scanning, analyze results, and close or mitigate findings.
* Organize the assessment of AGC GISO IT assets using applicable STIGs, SRGs, and/or vendor supply hardening guidelines.
* Responsible for configuring AGC GISO IT assets for vulnerability scanning and ensuring 100% coverage using credentialed scans.
* Coordinate with RNEC-NCR, C5

ISR, GISA, and other Army enterprise service providers, as necessary, to ensure vulnerability assessment tools are in place and working properly.
* Analyze vulnerability scan results and resolve open findings for findings that cannot be closed, create a POA&M, and recommend mitigation(s) to lessen the impact of the vulnerability; submit Operational Impact Statements (OIS) for Critical and High IAVAs.
* Create a POA&M and recommend mitigation(s) to lessen the impact of the vulnerability IAW with ARCYBER OPORD , submit Operational Impact Statements (OIS) for Critical and High IAVAs.
* Support response procedures for cybersecurity incidents, like breaches, spills, and insider threat actions.
* In coordination with the ISSM and IA Officer, all cybersecurity documentation required for accreditation for AGC's GISO…