Endpoint Security Technical Support Specialist

Endpoint Security Technical Support Specialist

The Alaka`ina Foundation Family of Companies (FOCs) is looking for an Endpoint Security Technical Support Specialist to provide research support administration services for our government customer in San Diego, California.

• Software Configuration Management, to include the following:
• Administer the DHA software configuration management plan, ensuring adherence to security and compliance requirements for enterprise endpoints.
• Deployment of DHA software packages via MECM (Microsoft Enterprise Configuration Manger) to all enterprise EUDs to ensure compliance with current security baselines and to maintain IAVM Compliance.
• Maintain the configuration management database (CMDB) to accurately document software components, dependencies, relationships, and changes.
• Coordinate with facilitators of configuration control boards (CCBs) to review and submit proposed changes to software baselines, images, assessing the impact on schedule, cost, quality, cybersecurity.
• Develop and maintain comprehensive documentation of all NMOTC Enterprise software component versioning.
• Use the Government’s CM system to record, track, monitor and update all component configurations, all subsequent component configuration changes, licensing, and Item Unique Identifier (IUID).
• Utilize a government-provided centralized data repository for recording and tracking information pertaining to all IT related asset warranty agreements and maintenance contracts (vendor name, commencement and expiration date, services/assets covered, fees, etc.) needed for accurate tracking to support the ongoing operations, repair, and maintenance of Government systems.
• Information Assurance Vulnerability Management (IAVM) Security Technical Implementation Standards (STIG) compliance, to include the following:
• Perform ACAS (Assured Compliance Assessment Solution) scanning to identify vulnerabilities in the network infrastructure and EUD (End User Device) footprint.
• Utilize Power Shell to develop and deploy scripts to monitor and mitigate security vulnerabilities in OS (Operating System) and software packages installed on systems.
• Stay up to date with cybersecurity advisories, vulnerability databases, and best practices to effectively manage and mitigate vulnerabilities.
• Coordinate with cybersecurity teams to prioritize and address IAVMs in accordance with compliance requirements and industry standards.
• Develop network security control procedures based on Security Requirements set forth by the Defense Information Systems Agency, Defense Health Agency, and local NMOTC Policies.
• Implement security controls, monitor, and respond to security alerts, analyze current technology packages for vulnerabilities and exposures.
• Utilize the Assured Compliance Assessment Solution (ACAS) suite to perform weekly vulnerability scanning and compliance checks on the MedCOI network.
• Submit periodic reports of compliance with established security procedures and policies.
• Monitor cybersecurity information channels to observe the latest developments in vulnerabilities, exploits, and countermeasures.
• Use a holistic approach in supporting the Release Management processes and methodologies to ensure that both the technical and non-technical aspects of patch management are taken into consideration.
• Image Management, to include the following:
• Deploy system images to maintain software configuration baselines in various environments and ensure IAVM Compliance.
• Establish procedures for deploying software images to EUDs to ensure consistent OS and software baselines.
• Collaborate with development teams to ensure proper configuration and standardization of image packages.
• Adhere to Release Management processes for implementing Government approved changes to IT services, both the software and the hardware.
• Monitor and verify that all server and storage systems and associated hardware and software components are tested and deployed within the Government’s environment in compliance with all appropriate DoD/DON cyber security requirements.
• Helpdesk Subject Matter Expertise (SME), to include the following:
• Serve as an SME for Helpdesk…