Cyber Defense Auditor (R&B)

The Cyber Defense Auditor uses a documented test plan and methodology and a variety of approved tools to conduct penetration tests and red/blue team operations for customer systems supporting the Defense Counterintelligence and Security Agency (DCSA) Hanover, MD., * Develop enterprise Red / Blue team plans and testing schedules

• Brief results of penetration testing activities
• Simulate internal lateral movement activities observed in successful attacks
• Identify and report security deficiencies
• Provide advisement on countermeasures to mitigate threats
• Provide vulnerability-to-exploit mapping
• Perform system post-implementation security posture determination
• Provide penetration testing services in support of continuous diagnostic mitigation process
• Maintain overall tracker of penetration testing activities
• Perform Red / Blue Team scenarios, planning, operations, and reporting

Must possess an active Top Secret security clearance, * At least 3 Years- hands-on technical Cybersecurity Experience and knowledge of Computer Network Defense concepts, DISA Security Technical Information Guides, DoD A&A Process, NIST SP 800-53, NIST SP 800-61, CJCSM 6510.01 B, United States Cyber Command guidelines, and other applicable DoD Cybersecurity and Computer Network Defense policies.

• Must meet DoD 8570.01-M IAT Level II and be able to perform as a CSSP-Auditor with Red and Blue Teams., * Associate’s Degree in Information Technology, Information Systems Management, Cyber Security, or equivalent experience