IS​/Network Security Specialist III

description

• focusing on user support and operational continuity, ensuring the platform remains available and usable
• providing hands-on cyber security support for secure aws services, enterprise network components, platform operations, mission-owner integrations, service requests, incidents, maintenance activities, and service-restoration efforts
• evaluating and remediating potential security risks, including cloud, network, host, application, identity, firewall, load-balancing, waf, certificate-management, and ci and cd pipeline security risks
• maintaining network diagrams, configuration records, operational runbooks, knowledge articles, technical procedures, and service-support documentation
• supporting the cyber security monitoring, vulnerability remediation, security-control validation, user support, incident handling, and operational continuity
• providing operations and customer support for all services, to include, but not limited to:
  • operating system maintenance
  • vpc configuration
  • cloud automation tools
  • amazon web services (aws)
  • scca network components (cisco routers and f5 devices)
  • scca firewall (palo alto)
  • identitfying and access management - active directory (ad)
  • multi-factor authentication
  • intrusion detection and intrusion prevention system (ids/ips)
  • assured compliance assessment solution (acas)
  • microsoft defender
  • windows server update services (wsus)
  • online certificate status protocol (ocsp)
  • gitlab and ci and cd pipeline network connectivity, access controls, runner connectivity, and devsecops infrastructure support
• providing cloud and network logging, monitoring, alerting, incident response, vulnerability remediation, configuration management, and continuous compliance activities

filling this position is contingent upon funding

#li-ll1

• bs degree in engineering, physical science, physics, network security, computer science
• 10 years of experience in relevant technical field, to include: technology analysis and assessment, design definition, development of systems specification, systems analysis, systems architecture, systems/equipment integration, test & evaluation criteria
• experience with cloud automation and infrastructure-as-code tools including ansible, terraform, cloud formation, lambda, python, and json
• experience supporting aws networking including virtual private cloud (vpc), routing, security groups, network access controls, dns, load balancing, and hybrid-cloud connectivity
• experience with risk management framework (rmf), security technical implementation guides (stigs), vulnerability management, continuous monitoring, and cyber security compliance
• experience developing technical documentation, network diagrams, configuration baselines, implementation procedures, operational runbooks, remediation plans, and technical reports
• ability to identify network and cyber security risks, assess potential mission impact, recommend mitigation measures, and track remediation through closure
• amazon web services (aws) experience
• holds a current comptia security+ certification
• five years of technical experience in cyber engineering, network infrastructure, networking, server virtualization, object-oriented programming, software development, software configuration, software installation, or cloud transition, and cyber security
• desire to work in a secure lab environment
• team player

• network experience
• experience supporting gitlab, gitlab runners, ci and cd pipeline connectivity, repository access, devsecops tooling, and network and security controls for software delivery
• experience with container networking and container security
• experience supporting aws secure cloud or federal mission environments
• experience with assured compliance assessment solution (acas), microsoft defender, windows server…