Assistant IT Support Lead

People, Technology & Processes

Cumberland County, NC, United States

about 1 month ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

2 years minimum

Working hours

Shift work

Job source

www.clearancejobs.com

Tech stack

Microsoft Windows Software System Penetration Testing Configuration Management Cyber Security Linux Information Technology Operations Network Security PCI Data Security Standards Information Security Management System Nessus Operating System Security Plan of Action and Milestones

+1 more

Vulnerability Analysis

Job description

Support IT Operations Branch cybersecurity functions, ensuring systems meet DoD and SOMTC security requirements.
Assist in RMF/ATO activities including documentation, compliance tracking, and package submission.
Conduct and analyze vulnerability scans, coordinate remediation actions, and maintain continuous monitoring requirements.
Support system hardening, configuration management, and security architecture planning.
Contribute to incident response efforts and ensure timely reporting and resolution.
Maintain accurate RMF artifacts, audit materials, and compliance documentation.
Collaborate with system administrators, network engineers, and mission support teams to ensure secure and resilient IT operations.

Requirements

Bachelors in IT/Cybersecurity, OR associate in IT/Cybersecurity with 5 years of experience.
Current certification meeting DCWF Information Systems Security Officer (722) at the Intermediate/Advanced level (e.g., CISSP or CISM); minimum 20 hours of Continuous Professional Development (CPD) annually.
Cybersecurity principles and methodologies.
Risk Management Framework (RMF).
Network security architecture and protocols.
Vulnerability assessment and penetration testing.
Security system design and implementation.
Incident response.
Compliance with NIST, FISMA, and PCI DSS.
Operating system security (Windows/Linux).
2 years managing DoD RMF packages in eMASS; performing vulnerability scans with ACAS/Nessus and analyzing results; developing and maintaining RMF artifacts such as the System Security Plan (SSP) and Plan of Action & Milestones (POA&M).