Cyber Defender Journeyman

Monitor, analyze, and detect Cyber events and incidents within information systems and networks under general supervision. Assist with integrated, dynamic Cyber defense, coordinate and maintain security toolsets to support organizations’ continuous monitoring and ongoing authorization programs. Develop security assessment plans for systems, including the objectives, scope, schedule, required documentation, possible risks, and other logistical items for security assessments; develops cloud service provider testing approach from security perspective. Provides validation of security control tests for cloud service provides; coordinating access to systems and approvals for scanning activities. Conducts ad hoc testing on an as-needed basis to assist with development activities or vulnerability remediation. Reviews/tests system security controls (managerial, operational, and technical) to determine adequacy against federal requirements (e.g., NIST SP 800-53) and mission context. Documents plans of action and milestones for corrective action following assessment activities and in response to identified vulnerabilities. Drafts security policies and procedures including the system security plan, and agency specific policies in accordance with NIST requirement. Routinely conducts risk assessments to quantify impacts of vulnerabilities.

Responsibilities

Monitor, analyze, and detect Cyber events and incidents within information systems and networks under general supervision; Assist with integrated, dynamic Cyber defense, coordinate and maintain security toolsets to support continuous monitoring and ongoing authorization programs; Develop security assessment plans for systems including objectives, scope, schedule, documentation, risks, and logistical items; Develop cloud service provider testing approach from security perspective; Validate security control tests for cloud service providers and coordinate access to systems and approvals for scanning activities; Conduct ad hoc testing to assist with development activities or vulnerability remediation; Review/test system security controls to determine adequacy against federal requirements (e.g., NIST SP 800-53) and mission context; Document plans of action and milestones for corrective action following assessment activities and in response to identified vulnerabilities; Draft security policies and procedures including system security plan and agency-specific policies in accordance with NIST requirements; Conduct risk assessments to quantify impacts of vulnerabilities

Requirements

3 to 10 years of experience; BA/BS or MA/MS degree; active Security Clearance

Benefits

Healthcare Coverage + Insurance: Medical (3 rich options through CareFirst), Dental + Vision (100% employer-paid for employees and family); Retirement + Savings: 401K – 10% total contribution (5% safe harbor + 5% annual profit share); Paid Time Off: 4 weeks starting PTO, 11 federal holidays + 2 floating holidays, paid hours for company-required training; Career Growth + Development: Free 24/7 Udemy learning, tech councils/industry initiatives, $7,500 annual Educational & Professional Development Assistance; Paid parental leave; Annual swag drops; Flexible work schedules; Generous referral bonus program; Employee appreciation + family-friendly corporate events