About Schubring Global Solutions
- Working as a member of the design team to ensure cybersecurity is built into the system.
- Perform the technical hardening and documentation of the system.
- Conduct cybersecurity hardening activities (system patching, updating (applications, OSs, firmware, antivirus, etc.), applying Secure Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs), and any other secure configuration requirements.
- Apply all applicable Defense Information System Agency (DISA) STIGs and SRGs to all system components. This includes all OS, Firmware, Group Policy, Domain, Network, and Application-Specific STIGs/SRGs.
- Use the automated Security Content Automation Protocol (SCAP) tool to evaluate STIG/SRG compliance.
- Complete STIG/SRG checklists for system components.
- Conduct vulnerability scans using Nessus (ensuring ACAS compatibility).
- Develop documentation to support the project (e.g. Implementation Plan, Security Controls, diagrams, and anything related to the RMF/RMF AO package).
- 5 years with BS/BA; 3 years with MS/MA; 0 years with PhD
- Possess one of the following certifications: CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP
- Five years of cybersecurity experience in performing system hardening.
- Demonstrated experience with performing STIG implementation.
- Demonstrated experience performing vulnerability assessments with the Nessus and Assured Compliance Assessment Solution (ACAS) compliant scans.
- Demonstrated experience remediating vulnerability findings to include implementing vendor patches on both Linux and Windows Operating
- Travel up to 50%
- Be willing to submit to a government suitability investigation.
- Familiarity with the following:
- UFC 4-010-06 Cybersecurity of Facility-Related Control Systems
- AR 25-2 Army Cybersecurity
- AR 190-51 Security of Unclassified Army Resources
- DoD Directive 8140.01 Cyberspace Workforce Management
- DoD Instruction 8500.01, Cybersecurity
- DoD Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT)
- Defense Information Systems Agency (DISA) Secure Technical Implementation Guides (STIGs)
- Have completed, or willing to complete Antiterrorism/Operations Security (AT/OPSEC)
Location: Sterling, Virginia (On-Site)
Job Type: Full time
Career Level: Mid-career
Category: Engineering
Exemption Type: Exempt
Security Clearance: Must successfully pass a company background check.
The pay range for this role is:
95,000 - 100,000USD per year (Sterling, VA)