Cyber Defender Senior

Monitor, analyze, and detect Cyber events and incidents within information systems and networks under general supervision. Assist with integrated, dynamic Cyber defense, coordinate and maintain security toolsets to support organizations’ continuous monitoring and ongoing authorization programs. Develop security assessment plans for systems, including the objectives, scope, schedule, required documentation, possible risks, and other logistical items for security assessments; develops cloud service provider testing approach from security perspective. Provides validation of security control tests for cloud service provides; coordinating access to systems and approvals for scanning activities. Conducts ad hoc testing on an as-needed basis to assist with development activities or vulnerability remediation. Reviews/tests system security controls (managerial, operational, and technical) to determine adequacy against federal requirements (e.g., NIST SP 800-53) and mission context. Documents plans of action and milestones for corrective action following assessment activities and in response to identified vulnerabilities. Drafts security policies and procedures including the system security plan, and agency specific policies in accordance with NIST requirement. Routinely conducts risk assessments to quantify impacts of vulnerabilities.

Responsibilities

Monitor, analyze, and detect Cyber events and incidents within information systems and networks under general supervision; Assist with integrated, dynamic Cyber defense, coordinate and maintain security toolsets to support organizations’ continuous monitoring and ongoing authorization programs; Develop security assessment plans for systems, including the objectives, scope, schedule, required documentation, possible risks, and other logistical items for security assessments; develops cloud service provider testing approach from security perspective; Provides validation of security control tests for cloud service provides; coordinating access to systems and approvals for scanning activities; Conducts ad hoc testing on an as-needed basis to assist with development activities or vulnerability remediation; Reviews/tests system security controls (managerial, operational, and technical) to determine adequacy against federal requirements (e.g., NIST SP 800-53) and mission context; Documents plans of action and milestones for corrective action following assessment activities and in response to identified vulnerabilities; Drafts security policies and procedures including the system security plan, and agency specific policies in accordance with NIST requirement; Routinely conducts risk assessments to quantify impacts of vulnerabilities

Requirements

Over 10 years of experience and an MA/MS degree; Active Security Clearance

Benefits

Three healthcare options through CareFirst with 100% or majority company-paid premiums; Tax-advantaged health savings account with generous employer contribution; 100% employer-paid dental and vision for employees and family; 401K with 10% total contribution (5% safe harbor + 5% annual profit share, immediately vested); 4 weeks starting PTO; 11 federal holidays + 2 floating holidays; Paid hours for company-required training; Free 24/7 learning via Udemy; Opportunities to participate in tech councils and industry initiatives; $7,500 annual educational & professional development assistance; Paid parental leave; Annual swag drops; Flexible work schedules; Generous referral bonus program; Employee appreciation and family-friendly corporate events