To be successful, this position must actively mitigate security risks to the enterprise by assisting with continuous monitoring and compliance tracking. This work includes evaluating test findings, updating security artifacts in government tools (CSAM), and tracking vulnerabilities to closure. Coordination with the various application teams is key to success for this work area.

The successful candidate must hold a current and favorably adjudicated CBP suitability background investigation.

Responsibilities

Interact with development teams, system owners, and ISSOs. Consequently, this role requires excellent customer service, organizational skills, verbal and written communication skills, and the ability to provide the following services:

• Support the maintenance of the security posture for PSPD applications.

• Review vulnerability scan reports, analyze findings, and open Jira tickets to assign tasks to the application development teams for remediation.

• Assist in developing, tracking, and updating Plans of Action and Milestones (POA&Ms) in the DHS Cyber Security Assessment and Management (CSAM) tool until closed.

• Evaluate Security Test Report findings associated with PSPD systems and assist in developing mitigating actions for Information Security Vulnerability Management (ISVM) alerts.

• Respond to email inquiries from PSPD application teams requesting guidance on security topics within strict Service Level Agreements (e.g., within 3 business days).

• Assist in the development of IT security waivers and exception requests for outstanding security POA&Ms requiring additional resources.

• Maintain the PSPD Security Branch’s sites (SharePoint, Confluence, and Jira), ensuring security-related system information, FISMA IDs, ATO dates, and Quick Links are accurate and up-to-date.

• Support the tracking and status review of approximately 190 Interconnection Security Agreements (ISAs).

• Follow the Agile process for all security-related work, including Sprint Planning, Sprint Reviews, retrospectives, and daily Agile meetings.

• Readily adapt to emerging security tools and processes used by CBP (e.g., Splunk, Nessus, Anchore, WebInspect, DBProtect, Qualys).

• Other duties as assigned, Where driving may be required or where a rental car must be obtained for business travel purposes, applicants must have a valid driver license for this position and will be subject to verification. In addition, the applicant must pass an in-house, online, driving course to be authorized to drive for company purposes.

UIC is an equal opportunity employer. We evaluate qualified applicants without regard to race, age, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other protected characteristics EOE/D/V. In furtherance, pursuant to The Alaska Native Claims Settlement Act 43 U.S.C. Sec. 1601 et seq., and federal contractual requirements, UIC and its subsidiaries may legally grant certain preference in employment opportunities to UIC Shareholders and their Descendants, based on the provisions contained within The Alaska Native Claims Settlement Act. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities. Please view Equal Employment Opportunity postershere (https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf) .

All candidates must apply online at www.uicalaska.com , and submit a completed application for all positions they wish to be considered. Once the employment application has been completed and submitted, any changes to the application after submission may not be reviewed. Please contact a UIC HR Recruiter if you have made a significant change to your application. In accordance with the Americans with Disabilities Act of 1990 (ADA), persons unable to complete an online application should contact UIC Human Resources for assistance www.uicalaska.com/careers/recruitment/ .

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)

UIC Government Services (UICGS / Bowhead) provides innovative business solutions to federal and commercial customers in the areas of engineering, maintenance services, information technology, program support, logistics/base support, and procurement. Collectively, the fast-growing Bowhead Family of Companies offers a breadth of services which are performed with a focus on quality results. Headquartered in Springfield, VA, we are a fast-growing, multi-million-dollar company recognized as a top Alaska Native Corporation providing services across the Department of Defense and many federal agencies. Bowhead offers competitive benefits including medical, dental, vision, life insurance, accidental death and dismemberment, short/long-term disability, and 401(k) retirement plans as well as a paid time off programs for eligible full-time employees. Eligible part-time employees are able to participate in the 401(k) retirement plans and state or contract required paid time off programs.

Join our Talent Community!

Join our Talent Community (https://talentconnect.uicalaska.com/government-services/talentcommunity) to receive updates on new opportunities and future events.

Software Powered by ICIMS (https://icims.help/candidate-faq)

• Bachelor’s degree in an IT-related field

• At least 2-4 years of experience supporting IT system security, cybersecurity tracking, or compliance monitoring.

• Knowledge of federal security frameworks, including FISMA, NIST 800-53 security controls, and DISA STIGs.

• Experience tracking technical tasks using Agile/ticketing platforms like Jira.

• Familiarity with vulnerability scanning tools and interpreting scan reports.

• Outstanding communications skills—both written and oral.

• Ability to work in a collaborative, schedule-driven environment and manage multiple tracking tasks simultaneously.

• Experience with US Government systems, particularly navigating CSAM or DHS/CBP security policies is preferred.

• Security certifications such as CompTIA Security+ CE, CAP, or equivalent is preferred.

SECURITY CLEARANCE REQUIREMENTS: Candidates must hold a current and favorably adjudicated CBP suitability background investigation.

Physical Demands:

• Must be able to lift up to 25 pounds
• Must be able to stand and walk for prolonged amounts of time
• Must be able to twist, bend and squat periodically

LI-MN1

Applicants may be subject to a pre-employment drug & alcohol screening and/or random drug screen, and must follow UIC’s Non-DOT Drug & Alcohol Testing Program requirements. If the position requires, an applicant must pass a pre-employment criminal background history check. All post-secondary education listed on the applicant’s resume/application may be subject to verification.