Information Systems Continuous Monitoring; ISCM

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Arlington, VA, US

3 days ago Requisition

Clearance Requirements
:
Active Secret Clearance

Primary Location
:
Arlington, VA and/or Mechanicsburg, Pennsylvania, with assignments in Arlington, Virginia, as required.

The Information Systems Continuous Monitoring Support professional will provide advanced cybersecurity engineering and operational support to strengthen, sustain, and continuously improve the DSCA’s cybersecurity posture. This role focuses on implementing and optimizing Department of War (DoW) Zero Trust (ZT) principles and Continuous Monitoring strategies to protect enterprise systems, endpoints, users, and sensitive data.

The successful candidate will serve as a subject matter expert (SME) in cybersecurity tools, security policy enforcement, and automation. Working closely with the Cyber Operations Lead, this individual will help integrate and optimize DoW- and Defense Security Cooperation Agency (DSCA)-approved security solutions to enable proactive threat detection, risk-based access decisions, automated response capabilities, and defense-in-depth protection.

• Zero Trust Implementation and Sustainment
  :
  Support the Cyber Operations Lead in implementing, operationalizing, and sustaining the organization’s Zero Trust framework across all security pillars, ensuring alignment with DoW cybersecurity requirements and Continuous Monitoring objectives.
• Endpoint Security and Compliance
  :
  Implement, configure, and maintain endpoint security solutions, including Endpoint Detection and Response (EDR/XDR) and host-based security tools such as Crowd Strike and Trellix. Establish and enforce device health, security, and compliance policies to support risk-based access and conditional access decisions.
• Data Protection and Security Monitoring
  :
  Implement and maintain Data Loss Management (DLM) and Digital Rights Management (DRM) policies to safeguard sensitive information at rest, in use, and in transit. Configure and monitor security tools to enforce data protection requirements and reduce the risk of unauthorized disclosure or misuse.
• File Activity Monitoring and Anomaly Detection
  :
  Leverage File Activity Monitoring (FAM) capabilities to establish baseline user and system activity, monitor access to critical data repositories, and identify anomalous behavior that may indicate unauthorized access, data exfiltration, or other security threats.
• Security Automation and Orchestration
  :
  Develop, configure, and maintain Security Orchestration, Automation, and Response (SOAR) workflows and playbooks to automate security enforcement and incident response actions. Implement automated responses such as isolating noncompliant devices, blocking suspicious IP addresses, and revoking user sessions based on risk indicators.
• Security Tool Integration and Optimization
  :
  Integrate and optimize approved cybersecurity tools and platforms, including Security Information and Event Management (SIEM), EDR/XDR, SOAR, and related security technologies, to improve visibility, threat detection, policy enforcement, and operational efficiency.
• Continuous Monitoring and Threat Response
  :
  Support continuous assessment of security controls, monitoring of security events, and analysis of risk signals across integrated security platforms. Identify opportunities to improve detection capabilities, automate repetitive tasks, and strengthen the organization’s overall security posture.
• Cybersecurity Policy Enforcement
  :
  Help ensure that endpoint, data protection, identity, and access enforcement mechanisms operate consistently with established security policies, Zero…