Cyber Security Specialist

The Information Systems Security / Defensive Cyber Operations Specialist is responsible for protecting the confidentiality, integrity, availability, authentication, and non-repudiation of government information systems and networks. This position supports cybersecurity operations across enterprise environments by implementing security controls, monitoring network and system activity, responding to cybersecurity incidents, maintaining compliance, and supporting defensive cyber operations., * Implement, operate, and monitor cybersecurity controls protecting government information systems, networks, servers, and workstations.

• Ensure systems and personnel comply with established DoD, Marine Corps, and government cybersecurity policies, standards, and requirements.
• Develop, implement, and maintain government-approved cybersecurity policies, security plans, procedures, and operating documentation.
• Monitor enterprise networks for suspicious or malicious activity using intrusion detection, intrusion prevention, SIEM, vulnerability management, and security monitoring platforms.
• Identify, investigate, document, and respond to cybersecurity incidents, vulnerabilities, and potential system compromises.
• Perform cybersecurity incident handling, forensic analysis, remediation, containment, and recovery activities.
• Maintain workstation and server compliance with Marine Corps Host Based Security System (HBSS) requirements.
• Operate and monitor HBSS/McAfee security technologies, firewalls, IDS/IPS platforms, VPNs, and other point-of-presence security tools.
• Use automated cybersecurity platforms such as Tenable SecurityCenter, RedSeal, McAfee SIEM, HBSS, and related tools to identify vulnerabilities, incidents, configuration issues, and security threats.
• Operate and support Imperva Web Application Firewall (WAF) and Database Firewall technologies.
• Conduct vulnerability assessments and assist with remediation of identified cybersecurity risks.
• Support security certification and authorization activities for information systems and networks.
• Assist with Continuity of Operations and Disaster Recovery (COOP/DR) planning, testing, and execution.
• Support Public Key Infrastructure (PKI), certificate management, authentication, and encryption requirements.
• Operate and maintain Electronic Key Management System (EKMS) capabilities as required.
• Support secure network communications, access controls, authentication mechanisms, and data protection requirements.
• Collect, maintain, and report defensive cyber operations metrics, incident statistics, vulnerabilities, remediation activities, and cybersecurity trends.
• Provide cybersecurity guidance and technical recommendations to system administrators, network engineers, leadership, and other personnel.
• Maintain accurate documentation of cybersecurity incidents, investigations, corrective actions, system configurations, and compliance activities.

Technical Environment

Candidates may work with technologies including:

Cybersecurity / Endpoint Security

• McAfee Host Based Security System (HBSS)
• McAfee ePolicy Orchestrator (ePO)
• McAfee SIEM
• Endpoint security and host-based monitoring tools

Vulnerability & Network Security

• Tenable SecurityCenter
• RedSeal
• Intrusion Detection Systems (IDS)
• Intrusion Prevention Systems (IPS)
• Enterprise firewalls
• Virtual Private Networks (VPNs)

Application & Database Security

• Imperva Web Application Firewall
• Imperva Database Firewall

Identity & Cryptographic Security

• Public Key Infrastructure (PKI)
• Electronic Key Management System (EKMS)
• Certificate and encryption technologies

Core Areas of Responsibility

This role primarily supports:

• Defensive Cyber Operations
• Cybersecurity Incident Response
• Vulnerability Management
• Security Monitoring and Detection
• Network Security
• Endpoint Security
• System Compliance
• Cybersecurity Forensics
• PKI and Encryption
• COOP / Disaster Recovery
• Security Certification and Authorization
• DoD / Marine Corps Cybersecurity Compliance

Required:

Sec+ (Day 1)

DOD Secret or TS

The ideal candidate will have hands-on experience with DoD cybersecurity environments, host-based security tools, vulnerability management platforms, SIEM technologies, firewalls, intrusion detection/prevention systems, and incident response.