Information System Security Specialist III (SATCOM)

• Risk Assessment: Conduct comprehensive risk assessments to identify vulnerabilities and threats to information assets, systems, and networks. Analyze potential impacts and develop mitigation strategies.
• Security Architecture Development: Design, develop, and implement security architectures, policies, standards, and procedures to protect information assets and systems.
• Compliance: Ensure compliance with relevant regulatory requirements, industry standards and organizational policies. Develop and maintain documentation to support compliance efforts, such as IATT, IA certification documentation etc. 
• Cybersecurity: Implement and maintain cybersecurity measures to protect against cyber threats, including malware, phishing, ransomware, and other attacks. Stay abreast of emerging threats and vulnerabilities.
• Documentation: Maintain accurate and up-to-date documentation of security policies, procedures, and controls.
• Update patches to address vulnerabilities and support preparation and recurring scans/documentations to maintain IATT/ATO.
• Install, update, and troubleshoot systems/servers.
• Check system hardware availability, functionality, integrity, and efficiency.
• Conduct functional and connectivity testing to ensure continuing operability.
• Conduct periodic system maintenance including cleaning (both physically and electronically), disk checks, routine reboots, data dumps, and testing.
• Design group policies and access control lists to ensure compatibility with organizational standards, business rules, and needs.
• Develop and document systems administration standard operating procedures.
• Ensure the application of security patches for commercial products integrated into system design meets the timelines dictated by the management authority for the intended operational environment.
• Maintain baseline system security according to organizational policies.
• Identify and analyze anomalies in network traffic using metadataIsolate and remove malware.
• Identify applications and operating systems of a network device based on network traffic.

• Minimum of 5 years of experience in information assurance, cybersecurity, or a related field.
• Relevant certifications such as CompTIA, CISSP, CISM, Security+, or equivalent.
• Extensive knowledge of information security principles, practices, and technologies.
• Strong understanding of Department Of navy (DON) Risk Management methodologies and Frameworks (RMF).
• Proficiency in vulnerability management processes and tools.
• In-depth knowledge of security architecture and design principles.
• Examine network topologies to understand data flows through the network.
• Recommend computing environment vulnerability corrections.
• Bachelor's degree in Computer Science, Information Systems, or a related field.
• Demonstrated ability to immediately contribute to the organization's security posture with no supervision or training.

Powered by JazzHR