Information Security Specialist

At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.

Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.

Requisition #: 1413

Job Title:

Information Security Specialist

Clearance:
Active TS Required

Location:

Quantico, VA – 100% on-site

Travel:
Not anticipated

Agile Defense is an award-winning national security company looking for a Senior Systems Engineer to support our contract with a federal law enforcement agency.

This position will offer you a chance to support a federal agency by assessing, improving, monitoring, and documenting the security posture for an enterprise IT system. The Information Security Specialist will be part of a Project Management Office (PMO) and responsible for providing information security support to meet the needs and support the missions of the agency.

As a direct employee of Agile Defense, you would receive a benefit package that includes health/dental/vision insurance coverage, 401K with company match, PTO & paid holidays, and annual tuition/training assistance.

Active Top Secret clearance required

• Manage, monitor, and maintain IT infrastructure to ensure system uptime and optimal performance.
• Maintain performance to ensure that the throughput of the system does not degrade unexpectedly as the volume of work increases
• Perform regular system backups, recovery procedures, and data management tasks.
• Provide technical support and assistance to users.
• Develop and maintain system documentation, including configurations, procedures, and troubleshooting guides.
• Plan and implement software updates, hardware upgrades, and migrations with minimal disruption to operations.
• Provide technical support for systems and applications.
• Monitor and optimize the performance of the infrastructure.
• Develop and implement backup and recovery strategies.
• Ensure compliance with security and regulatory standards.
• Create, Modify, Disable User Accounts in accordance with Account Management Procedures.
• Monitor and review audit logs for suspicious activity
• Develop and/or update Standard Operation Procedures (SOPs) for all activities
• Collaborate and provide supporting artifacts and documentation to ISSO to support RMF process and ATO packages.
• Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information.
• Possess a strong understanding of the NIST Risk Management Framework (NIST SP 800-37), NIST Cybersecurity Framework, NIST Security and Privacy Controls for Information Systems and Organizations (NIST SP 800-53 revisions
  5), Zero Trust Architecture (NIST SP 800-207), Standards for Security Categorization of Federal Information and Information Systems (FIPS-199) and Minimum Security Requirements for Federal Information and Information Systems (FIPS 200).
• Possess familiarity with STIG Viewer, SCAP Compliance Checker (SCC), and Visio applications.
• Perform and review Tenable Security Center scans.
• Maintain hardware/software lists.
• Perform operating system, application, hardware/infrastructure, etc. hardening using DISA Security Technical Implementation Guidelines (STIGs) and/or SRGs as applicable for all appropriate systems.
• Implement the latest applicable Security Requirements Guide (SRG), STIG, and/or benchmarks. Utilize the latest Security Content Automation Protocol (SCAP) tool and manual SRGs, STIGs, and/or benchmarks. Analyze latest STIG updates on a minimum of a quarterly basis.
• Collaborate with System Administrators, Network Operations, etc. to address system vulnerabilities, track progress and ensure security measures are implemented effectively.
• Conduct security control assessments and validations of a system's technical and non-technical security features to mitigate known threats and vulnerabilities…