M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people, skills, clearance levels, and technologies to help organizations that desire improved performance and modern, sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include IT Talent Solutions, Data Delivery & Analytics, Cyber Security, Cloud Migration, Applications and Infrastructure, Software Development, and Finance & Accounting.
M9 Solutions is seeking a Cybersecurity Specialist 2 to work on-site in support of a government contract for a client located in Charleston, SC. An active Public Trust clearance is required.
Responsibilities
- Works closely with and supports team members, vendors, and government customers.
- Implements Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems.
- Assists in the development and verification of documentation necessary to complete the RMF assessment and authorization process.
- Conducts ICS/SCADA system inventories following government guidance.
- Conducts vulnerability scanning and documents system vulnerabilities.
- Supports ISO standardization and quality inspections.
- Participates in continuous improvement of organizational cybersecurity posture.
- Coordinates and implements technical controls and configuration settings as part of a multidisciplinary team.
Required Skills and Qualifications
- Ability to obtain a Public Trust security clearance.
- 0+ years of experience with a Master's degree in Information Technology, Risk Management, or Cybersecurity; or 2+ years of experience with a Bachelor's degree in Information Technology, Risk Management, or Cybersecurity; or 6+ years of experience with an Associate's degree in Information Technology, Risk Management, or Cybersecurity; or 8+ years of experience with a High School diploma.
- U.S. citizenship is required for this role.
- One of the following certifications: CASP CE, CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, CISA, CISM, GCED, or GCIH.
- Experience working with industry and government agencies on the design of platforms and integrated systems.
- Experience working on government and/or commercial projects implementing cybersecurity requirements in a variety of industrial control systems (e.g., building management, electronic security, fire alarm/mass notification, electrical distribution, power management, etc.).
- Proficiency with ACAS and HBSS and mitigation strategies.
- Experience developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
- Experience with assessment, mitigation, and closure of network vulnerabilities and vulnerability management in eMASS.
- Experience establishing, managing, and tracking Plans of Action and Milestones (POA&Ms).
- Experience applying STIGs to servers, databases, applications, and other hardware using Security Readiness Review (SRR) tools (scripts and ACAS).
- Ability to identify, maintain, and troubleshoot control network components.
- Excellent understanding of the RMF lifecycle and NIST 800-53 controls implementation.
- Awareness of NIST Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security and UFC 4-010-06 Unified Facilities Criteria (UFC) Cybersecurity of Facility.
- Working knowledge of operational control systems and implementing a variety of security assessment tools.
- Familiarity with DoDIN CCRI/CCORI and government TASKORDS.
- Familiarity with various industry products.
- Strong oral, written, and presentation skills with the ability and experience communicating directly with customers.
- Demonstrated background working with multidisciplinary teams.
- Demonstrated time management and organization skills to meet deadlines and quality objectives.
Preferred Skills and Qualifications
- Strong MS Excel, Word, PowerPoint, AutoCAD, Cameo, and Visio skills.
Full-Time Employee Compensation
- M9 Solutions’ pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include, but are not limited to, responsibilities of the position, education, experience, knowledge, skills, abilities, as well as internal equity, location, alignment with market data, applicable bargaining agreement (if any), or other law.
- M9 Benefits - https://m9solutions.com/why-join-m9/#our-benefits
M9 Solutions, LLC (M9) is a Federal subcontractor and complies with all applicable federal laws prohibiting discrimination in employment, including Title VII of the Civil Rights Act of 1964 and the Americans with Disabilities Act (ADA). M9 also adheres to the affirmative action requirements of the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA), ensuring equal opportunity for protected veterans. If you wish to voluntarily share that you are an individual with a disability, you are welcome to do so at any point in the application or employment process; M9 does not require this information, and it will not affect your candidacy. If you need accommodation during the application process or encounter difficulties using our website, please contact our Human Resources Department at [email protected] or 703-936-0880.
M9 Solutions is a proud participant in the Virginia Values Veterans (V3) program and supports the Military Medics and Corpsmen (MMAC) initiative, demonstrating our commitment to hiring and supporting veterans, transitioning service members, military spouses, and dependents.
With 15+ years of proven delivery and growth, M9 Solutions is a unique small business with credible past performance and key capabilities offering project management services, solution architects, business analysts, program managers, technical architects, and technical consultants. M9 was recognized as an Inc. 5000 Fastest-Growing Private Companies in 2021, 2020, 2019, 2018, 2017, 2016, and 2012. M9 Solutions believes that work should be fun, rewarding, and something everyone can be excited about. We offer a competitive compensation package and value diverse perspectives in driving the vision of the company.
Skills Required
- Master's degree in Information Technology, Risk Management, or Cybersecurity with 0+ years of experience
- Bachelor's degree in Information Technology, Risk Management, or Cybersecurity with 2+ years of experience
- Associate's degree in Information Technology, Risk Management, or Cybersecurity with 6+ years of experience
- High school diploma with 8+ years of experience
- U.S. citizenship
- Active Public Trust security clearance or ability to obtain one
- One of CASP CE, CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, CISA, CISM, GCED, or GCIH certifications
- Experience designing platforms and integrated systems with industry and government agencies
- Experience implementing cybersecurity requirements in industrial control systems
- Proficiency with ACAS, HBSS, and mitigation strategies
- Experience developing information-system security policies and procedures
- Experience with vulnerability assessment, mitigation, closure, and vulnerability management in eMASS
- Experience establishing, managing, and tracking POA&Ms
- Experience applying STIGs using Security Readiness Review tools, scripts, and ACAS
- Ability to identify, maintain, and troubleshoot control network components
- Understanding of the RMF lifecycle and NIST 800-53 controls implementation
- Awareness of NIST SP 800-82 and UFC 4-010-06
- Working knowledge of operational control systems and security assessment tools
- Familiarity with DoDIN CCRI/CCORI and government TASKORDS
- Strong oral, written, presentation, customer-communication, time-management, and organizational skills
- Experience working with multidisciplinary teams
- Strong Microsoft Excel, Word, PowerPoint, AutoCAD, Cameo, and Visio skills
What We Do
Founded in 2007, M9 Solutions is a fast-growing small business dedicated to providing IT services and solutions to the Federal Government. We focus on developing and delivering robust, secure, and stable technology solutions across multiple core capabilities to include software development, cloud migration and infrastructure, cybersecurity, data delivery, and data analytics. M9 is DELIVERING THE DIGITAL FUTURE℠ by mobilizing the right people, skills, and technologies to help organizations who desire improved performance and modern, sustainable change.
