Cybersecurity Specialist

Cybersecurity Specialist

Location:

Offutt AFB, NE

This position is contingent upon contract award.

This position requires the ability to obtain and maintain a Top Secret U.S. Government Security Clearance with SCI eligibility. U.S. Citizenship status is required, as this position necessitates an active U.S. Government Security Clearance for employment. Non-U.S. citizens are not eligible to obtain a U.S. security clearance. The Department of Defense Consolidated Adjudications Facility (DoD CAF), a federal government agency, handles the adjudicative aspects of the security clearance process for industry applicants.

Adjudicative factors which affect the outcome of the eligibility determination include, but are not limited to, allegiance to the U.S., foreign influence, foreign preference, criminal conduct, security violations, and illegal drug use.

As a Cybersecurity Specialist, you will be responsible for assessing the security of systems, applications, and networks using established cybersecurity tools, frameworks, and testing methodologies. You will identify vulnerabilities, evaluate cybersecurity controls, and support the development of documentation, reports, and recommendations that ensure compliance with required security standards. This role also involves conducting a variety of security tests and audits, analyzing findings, and helping strengthen overall cybersecurity posture across supported environments.

• Bachelor's degree in Computer Science or other related field.
• Minimum of 3 years of experience conducting penetration testing or Blue team testing required
• Possession of one of the following certifications: GPEN, GWAPT, GSE, OSEE, OSCE, OSCP, or GXPN.
• Knowledge of application security principles and safe coding techniques.
• Experience with programming languages such as SQL, C#, JavaScript, Ruby, Power Shell, and Python.
• Proficiency with security assessment tools including Tenable NESSUS, Web Inspect, OWASP ZAP, Burp Suite, Metasploit, and Kali Linux.
• Familiarity with security frameworks such as NIST, MITRE ATT&CK, OWASP, and APT TTPs.
• Experience using operating systems such as Linux, UNIX, and Windows.
• Possession of DoD Directive (DoDD) 8570 Information Assurance Management (IAM) Level II certification or DoDD 8140 Information Assurance Security Engineer Level II certification.
• Knowledge and experience with NIST 80053 and DoD Risk Management Framework tools, including eMASS and Xacta.

• Understand and develop Plan of Action and Milestones (POA&M) required in support of information assurance or security necessities.
• Evaluate new applications software technologies; and/or ensuring the rigorous application of information security/ cybersecurity policies, principles, and practices to the delivery of application software services.
• Manage the fact finding, analysis, and development of hypothesis, conclusions, production of final reports and presentations, which requires expert knowledge of database practices, and USSTRATCOM database organization, operations and objectives, and requires training in application security and software analytical tools used by the IPT.
  • These tools include:
    Application Security App Detective Pro, Application Security DBProtect, Fortify Source Code Analyzer, Fortify 360 Server, Fortify Real-Time Analyzer, IBM/Rational App Scan.
• Support Cybersecurity and Cybersecurity Testing.
• Conduct tests of cybersecurity safeguards and integration of systems IAW established test plans, STIGs and Cybersecurity Controls. Cybersecurity support must be able to identify areas of cyber weakness within the programs and assist in providing solutions and document results with POA&Ms. Cybersecurity staff must ensure the design of hardware, operating systems, and software applications adequately address security requirements for the Computing Environment (CE) to include testing cybersecurity mitigations.
• Provide support in the development and implementation of doctrine and policies including CJCSI 6510.01E IA and Computer Network Defense (CND); CNSSP-22 Information Assurance Risk Management Policy for National…