Cyber Security Professional
Job Title: CYB-E Cyber Security Professional
Career Level From: Senior Associate
Career Level To: Specialist
Organization: Cyber Operations
Job Specialty: Cyber Security
What You'll Do
Location: Amarillo, Texas or Oak Ridge, Tennessee
The Cyber Security Professional is responsible for the certification and testing of systems, as well as the development of required cyber documentation for new/existing systems. Additionally, this person will need to develop automated testing scripts/tools for continuous monitoring of assets. This role includes responsibilities of the Information System Security Officer (ISSO) for classified and unclassified information systems. Candidate is expected to have an understanding of the NIST Risk Management Framework (RMF) and the various supporting elements. This role is expected to stay up to date on the latest risks and threats to information security systems, as well as working with the technology subject matter expert to develop risk assessments and the proper mitigations.
What You Can Expect
- Meaningful work and unique opportunities to support missions vital to national and global security
- Top-notch, dedicated colleagues
- Generous pay and benefits with a stable organization
- Career advancement and professional development programs
- Work-life balance fostered through flexible work options and wellness initiatives
Minimum Job Requirements
- Bachelor's degree in engineering/science/information technology discipline with a minimum two years of relevant experience OR a Master's degree in engineering/science/information technology discipline
- Ten or more years of relevant education, training, and/or progressive experience may be considered to satisfy educational and years-of-experience requirements for this posting. For postings on the Engineering, Science and IT Ladder, in lieu of a technical bachelor's degree, the Operations Professional Ladder may be considered.
Preferred Job Requirements
- Knowledge of Federal Cybersecurity protection standards and baselines (e.g. NIST Cybersecurity Framework, NIST SP 800-53, DoD STIGs, CNSSI 1253)
- Knowledge of Risk Management Framework (NIST SP 800-37 and SP 800-39)
- Ability to identify cyber risks and appropriate mitigations
- Ability to create required documentation and to leverage automated tools such as electronic Governance, Risk, and Compliance (eGRC) systems
- Ability to develop and manage system lifecycle events such as certification and accreditation activities, annual risk and contingency reviews, and privacy impact reviews
- Ability to develop and update system baselines and threat models for deployment and risk acceptance decisions
- Ability to research and document security best practices for particular devices, applications, and emerging technologies
- Knowledge of and ability to adhere to Federal and industry-standard software quality assurance practices
- Strong teamwork skills, including interaction with end users and operations personnel, in a service-oriented environment
- Ability to present administrative, technical, and operational information clearly and effectively through the oral and written word as well as diagrams and charts
- Ability to document work and train others
- Ability to script compliance checks
- Familiarity with Tenable and/or other automated compliance scanning tools
- Continuous improvement and feedback for existing processes
- Strong foundation in and in-depth technical knowledge of security engineering, computer and network security, authentication, and security controls
- Familiarity with operating systems, web applications, and networking
- Knowledge of the ITIL framework
CNS is a drug-free workplace. Candidates accepting a job offer will be required to pass a pre-placement physical, drug screening and background investigation. As an employee, you may be required to receive and maintain a security clearance from the United States Department of Energy in order to meet eligibility requirements for access to sensitive information or matter. U.S. citizenship is a requirement for security clearance applicants. All employees with a security clearance are also subject to being randomly selected for drug testing without advance notification.
CNS is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, gender, sexual orientation, gender identity, age, religion, national origin, ancestry, genetic information, disability or veteran status.