The Role
Leads cybersecurity operations and FISMA compliance for federal computing environments. Responsibilities include vulnerability scanning, patching, hardening, baseline and configuration management, logging, auditing, network defense, security event monitoring, data-flow analysis, incident response support, and FISMA documentation and reporting. The role coordinates with systems engineers, operations personnel, and program management to maintain secure, compliant systems and communicate security posture and remediation status.
Summary Generated by Built In
Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!
Job Summary
Under IT Security, the staff shall operate, maintain, and enhance NICHD’s computing environments so that all IT services to the end-users are provided without threats and vulnerabilities. The following areas shall be served:
• Cybersecurity
• FISMA Compliance Support
What’s in it for you:
CYBERSECURITY:
What you will bring:
How you will wow us:
JCS is both a Great Place to Work and a Top Places to Work certified company.
Our employees embody our core values, and we are looking for others who do too!
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.
Job Summary
Under IT Security, the staff shall operate, maintain, and enhance NICHD’s computing environments so that all IT services to the end-users are provided without threats and vulnerabilities. The following areas shall be served:
• Cybersecurity
• FISMA Compliance Support
What’s in it for you:
- Join a premier technology firm specializing in innovative solutions.
- Be part of a collaborative, inclusive, and innovative work culture.
- Enjoy tremendous growth potential in a high-performing team environment.
- A robust benefits package:
- Health, dental, and vision insurance
- Life insurance
- Short-and-long term disability
- Paid time off (PTO)
- 401k retirement plan with employer match
- Annual Professional Development Reimbursement Program
- And more!
CYBERSECURITY:
- Oversee routine vulnerability scanning capabilities across networks and systems.
- Oversees patching, hardening and baselining activities across networks; ensures other stakeholders are in compliance with established patching/hardening policies.
- Maintains, configures, and ensures the successful deployment of logging/auditing tools across the networks; ensures logging activities are functional across all networks.
- Maintains system baseline and configuration management items, including security event monitoring policies in a manner determined and agreed to by the program management.
- Interacts with both Systems engineers and O&M personnel to ensure a complete and functioning system that meets requirements.
- Ensures all Network Defense capabilities are kept current, patched, securely configured, and communicates status to management.
- Analyzes the data flows into, out of, and across networks to ensure security gaps do not exist and data exchange is in line with system classification level.
- Researching, analyzing, and reporting on different trends using publicly available or collected data.
- Ensuring effective implementation of annual FISMA reporting review requirements.
- Reviewing security documentation of various NICHD systems to assure FISMA Compliance is effectively implemented and monitored.
- Having the necessary organization, experience, and technical controls.
What you will bring:
- Four (4) to six (6) years of hands-on experience providing technology leadership for IT Security and FISMA Compliance.
- Three (3) or more years of experience of new and emerging cybersecurity technologies including but not limited to: hands-on tool usage of BigFix, Splunk, Tripwire, Cylance, Tenable etc.
- Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
- Experience with incident response and handling methodologies.
- Experience with Security Assessment and Authorization in Federal environment.
- Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities.
- Bachelor's degree in Computer Science, Engineering, Cybersecurity, or related STEM field. An additional four (4) years of relevant experience may be substituted for the degree requirement.
- Must be US Citizen and able to obtain a security clearance.
How you will wow us:
- CISSP, CISA, CISM, and/or SSCP.
- Strong skills in the following key areas including strategic thinking, multi-tasking, negotiation, conflict management, time management, planning and executing to a defined schedule/budget.
- Able to communicate complex technical concepts and project information clearly and concisely to both technical and non-technical audiences.
- Ability to work effectively as a member of an integrated team and the ability to negotiate reasonable compromises among a diverse group of stakeholders.
- Ability to work in a fast paced, technically challenging area; ability to anticipate changes, problems, or activities, assess impacts and recommend sound solutions.
- Able to work independently and motivated, capable of working across teams and organizations.
- Prefer experience with data analytics and combining data sets from multiple sources to provide reports for identifying risk and measuring security posture.
- Prefer strong skills in the following key areas including strategic thinking, multi-tasking, time management, planning and executing to a defined schedule.
- Expert level of experience with Microsoft products Word, PowerPoint, Excel, and Visio.
- Prior experience using a helpdesk ticketing system such as ServiceNow is preferred.
- Prior federal government IT Security experience is preferred.
JCS is both a Great Place to Work and a Top Places to Work certified company.
Our employees embody our core values, and we are looking for others who do too!
- Customer Experience: Strive for excellence and delight our clients
- Innovation: Embrace creative thinking to enable continual growth and powerful solutions
- Accountability: Take ownership of and pride in our actions and service delivery
- Inspire: Be inspired to be your best self and have fun in the process
- Integrity: Do the right thing, the right way, every time!
- Stewardship: The careful and responsible management of something entrusted to our care.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.
Skills Required
- Four to six years of hands-on technology leadership experience in IT security and FISMA compliance
- Three or more years of experience with emerging cybersecurity technologies, including BigFix, Splunk, Tripwire, Cylance, or Tenable
- Knowledge of vulnerability information sources, including alerts, advisories, errata, and bulletins
- Experience with incident response and handling methodologies
- Experience with Security Assessment and Authorization in a federal environment
- Knowledge of standards-based IT security assessment, monitoring, detection, and remediation methods
- Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related STEM field, or four additional years of relevant experience
- Must be a US citizen and able to obtain a security clearance
- CISSP, CISA, CISM, and/or SSCP certification
- Experience with data analytics and combining datasets for security risk and posture reporting
- Expert-level experience with Microsoft Word, PowerPoint, Excel, and Visio
- Experience using a helpdesk ticketing system such as ServiceNow
- Prior federal government IT security experience
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
JCS is a premier technology firm specializing in enterprise-wide capabilities, digital transformation, software solutions, and IT services. We hold contracts in support of federal, state, and local government organizations in addition to assisting industry leaders in the private sector. Vision: Elevate the customer, the employee, and the community Mission: Delivering superior, mission-focused technology solutions to empower our clients. Our Services: • IT Services & Solutions • Cyber Security • Advanced Data Analytics • Health IT • Professional Services • Digital Transformation • Partner Network and Technology Certifications JCS is an 8(a) Certified Small Business, Economically Disadvantaged Woman-Owned Small Business (EDWOSB), Minority-Owned Small Business (MOSB), and Small Disadvantaged Business (SDB) based out of the Washington D.C. Metropolitan area. JCS is ISO 9001:2015, ISO/IEC 20000-1: 2018, ISO/IEC 27000: 2013 certified and appraised at CMMI Level 3 for both Development and Services. JCS is a Microsoft Gold and ServiceNow Premium partner. We are also certified as a “Great Place to Work.”
