We are seeking an ISSE with an active Secret Clearance to provide onsite customer support at the Fort Belvoir customer site, 5 days a week for a Department of War combat support agency focused on protecting the United States and its allies from weapons of mass destruction (WMD) and emerging threats. DTRA supports the warfighter by delivering technical, operational, and strategic capabilities that help deter strategic attacks, reduce and counter WMD threats, and strengthen national security and mission readiness.
RESPONSIBILITIES:
- Must possess excellent written and oral communication skills, with an ability to brief Program Management, Government customers (to include System Owner and/or COR) and Government Cybersecurity personnel. Briefings might be daily, weekly, monthly or on an ad-hoc basis. Must be detail oriented.
- Strong understanding of the DoD Risk Management Framework (RMF) and experience with tools such as Enterprise Mission Assurance Support Service (eMASS), ESS/HBSS, ACAS, patching solutions, etc.
- Create and manage authorization packages in eMASS for two enclaves. Collaborate with cybersecurity teams to support Authorization to Operate (ATO) packages, Plans of Action & Milestones (POA&Ms), and audit readiness, while maintaining detailed system documentation.
- Document and manage vulnerabilities in a Plan of Actions and Milestones (POA&M) and provide updates on open vulnerabilities to Program Management and Government personnel.
- Implement and maintain security controls in compliance with DISA Security Technical Implementation Guides (STIGs) and DoD cybersecurity policies to ensure the secure configuration of all systems.
- Perform system hardening, patching, and vulnerability remediation using tools such as the Assured Compliance Assessment Solution (ACAS) and Endpoint Security Solutions (ESS).
- Apply and manage patches and updates across all Linux and Windows systems in accordance with DoD patch management policies, ensuring timely remediation of vulnerabilities.
- Expertise in Windows Server and/or Linux (RHEL) administration, virtualization technologies (VMware, Hyper-V, Nutanix), and a comprehensive understanding of networking fundamentals, including routing, DNS, and firewalls.
- Hands-on experience with DoD-specific security tools such as ACAS, ESS (formerly HBSS), and Security Content Automation Protocol (SCAP) or other STIG tools.
- Bachelor of Science degree in a related area
- 10-15 overall years of experience. Can have less overall YOE with a degree with 5 – 10 years of DoD/DoW experience in systems support and cybersecurity
- DoD 8570 IAT Level II certification (such as Security+ CE, CYSA+, or CASP+ CE) is required
Skills Required
- Bachelor of Science degree in a related area
- 10–15 years of overall experience
- Alternatively, 5–10 years of DoD/DoW experience in systems support and cybersecurity with a degree
- DoD 8570 IAT Level II certification, such as Security+ CE, CySA+, or CASP+ CE
- Active Secret clearance
- Experience with the DoD Risk Management Framework
- Experience with eMASS, ACAS, ESS/HBSS, patching solutions, and STIG tools
- Windows Server and/or Linux RHEL administration experience
- Experience with VMware, Hyper-V, or Nutanix virtualization technologies
- Understanding of networking fundamentals, including routing, DNS, and firewalls
What We Do
For over 20 years, TDI’s one and only passion has been delivering cybersecurity solutions to effectively manage the business of cyber. At the global vanguard of innovation, we created Cybersecurity Performance Management (CPM) and the industry-leading CPM platform, CnSight®. Combining CnSight® with our remarkable historical experience and our exceptional capabilities of cyber operations and compliance, we offer Managed Cybersecurity Performance, a first of its kind managed CPM offering. TDI’s CPM solutions mitigate risk, reduce ransomware, provide continuous compliance, improve cyber-ROI, and provide comprehensive instantaneous visibility into how an organization is performing against its cyber strategy, particularly for Boards of Directors. CnSight® is the industry-leading Cybersecurity Performance Management (CPM) platform which mitigates risk, reduces ransomware, provides continuous compliance, improves cyber-ROI, and provides comprehensive instantaneous visibility into how an organization is performing against its cyber strategy, so executives and Boards may effectively manage the business of cybersecurity– the result: reduced stress, better performance, less cost, and a true understanding of cyber investment. With CnSight® at its core, TDI’s Managed Cybersecurity Performance offering ensures strategic cyber goals are met to protect an organization’s investments, assets and reputation by reducing the risk of ransomware, lowering cyber insurance premiums, improving ROI, reducing legal and fiduciary liability, delivering actionable reporting to the Board and C-Suite, providing on-call advice, ensuring continuous compliance and providing subject matter expertise on the organization’s behalf in meeting with the C-Suite and the Board, dealing with auditors, and supporting budget decisions – the result: reduced stress, better performance, less cost, and a true understanding of cyber investment.
