Provide comprehensive Computer Network Defense and Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise.
Responsibilities
Conduct security event monitoring, advanced analytics and response activities
Support activities within Special Access Programs (SAPs) supporting Department of Defense agencies
Provide day-to-day support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities
Lead efforts in Incident Handling, Hunting, and Malware Analysis
Analyze security events and investigate incidents
Requirements
Bachelor’s Degree in Computer Science, Information Technology or equivalent experience
The Information Systems Security Officer (ISSO) will be responsible for ensuring development and proper implementation of the security controls documented in the System Security Plan (SSP) for all information systems for which the ISSO is responsible, including sensitive networks and National Security Systems supporting business, special purpose, and security functions.
Compensation
The base salary range for this position in Tennessee (US-TN) at the start of employment is expected to be between $70,000 and $103,000 per year.
Responsibilities
Ensure implementation of protection measures documented in the SSP for each information system for which they are the ISSO
Maintain the SSP and associated artifacts, including risk assessments, Privacy Impact Assessments, vulnerability assessments, Plans of Action and Milestones POA&Ms, etc.
Ensure that security controls for information system resources are based on the least privilege principle and develop alternative solutions to mitigate risk when the most desirable security controls cannot be fully implemented
Identify, in coordination with the ISSM, and document in the SSP, unique threats to information systems for which they are responsible
Provide technical assistance with the initial set-up, secure deployment, and proper management of systems that support information security including virus detection, application whitelisting, centralized logging, data loss prevention, and intrusion detection systems
Requirements
Bachelor’s degree in a related Information Technology field
Nice to have: Experience supporting Department of Energy (DOE) and National Nuclear Security Administration (NNSA) cyber security systems and infrastructure
Nice to have: Familiarity with DOE and NNSA cyber security directives, policies, and accreditation processes
Nice to have: COMSEC Account Manager (CAM) experience
Nice to have: Knowledge of Operational Technology (OT), DCS, or industrial control system cybersecurity
