[Hiring] Senior Cybersecurity Auditor @Goldbelt

Role Description

The Senior Cybersecurity Auditor provides independent security assessment and compliance oversight in support of the Defense Logistics Agency (DLA) under the J6 Enterprise Technology Services (JETS) contract.

• Independently performs complex security analysis of classified and unclassified applications, systems, and enclaves for compliance with security requirements.
• Performs Command Cyber Readiness Inspections and cybersecurity vulnerability evaluations.
• Uses a variety of security techniques, technologies, and tools to evaluate security posture in highly complex computer systems and networks.
• Performs vulnerability and risk analysis and participates in a variety of computer security penetration studies.
• Analyzes and defines security requirements for computer and networking systems, to include mainframes, workstations, and personal computers.
• Recommends solutions to meet security requirements.
• Gathers and organizes technical information about an organization's mission goals and needs and makes recommendations to improve existing security posture.
• Provides enterprise-wide technical analysis and direction for problem definition, analysis and remediation for complex systems and enclaves.
• Provides workable recommendations and advice to client executive management on system improvements, optimization, and maintenance in the following areas: Information Systems Architecture, Automation, Telecommunications, Networking, Communication Protocols, Application Software, Electronic Email, VOIP and VTC.
• Competent to work at the highest level of all phases of information systems auditing.

Qualifications

• Proven proficiency performing CCRI/ vulnerability assessment/ penetration testing on networks, databases, computer applications and IT frameworks.
• Knowledge and understanding of DOD security regulations, DISA Security Technical Implementation Guides.
• Understanding of SCAP.
• Knowledge of and proficiency with:
  • VULNERATOR
  • USCYBERCOM CTO Compliance Program
  • Wireless vulnerability assessment
  • Web Services (IIS, Apache, Proxy)
  • Database (SQL Server, Oracle)
  • Email Services (Exchange)
  • Vulnerability Scans (NESSUS, SCCM)
  • Knowledge of Phishing exercises
  • Cloud Security
  • Operational Technology
  • Artificial Intelligence
  • USB Detection
  • Physical Security
  • Familiarity with AUTOCHECKLIST Tool
• Strong analytical and problem-solving skills for resolving security issues.
• Strong skills implementing and configuring networks and network components.

Requirements

• Minimum seven (7) years of IT experience.
• Minimum five (5) years of cybersecurity experience.
• Command Cyber Readiness Inspection certification or equivalent in at least one of the following areas:
  • Nessus Scan Analysis
  • Operating Systems (Windows, Unix)
  • Boundary Defense (Network Policy, Router, Firewall)
  • Internal Defense (L2 Switch, L3 Switch)
  • DNS (Policy, BIND/Windows)
  • HBSS (remote console, AV, ABM, PA HIPS, ePO)
  • Traditional Security (Common, Basic, NCV, SCV)
  • Wireless Communications (BES, Handhelds)
• Tenable Certified NESSUS Auditory.
• Required to possess a DOD SECRET Clearance and be eligible for an IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) upon assignment.
• Required to be a DISA Risk Management Executive, Cyber Standards Branch Certified Command Cyber Readiness Inspection (CCRI) Team Lead and have a certification in penetration testing, such as:
  • Licensed Penetration Tester (LPT)
  • Certified Expert Penetration Tester (CEPT)
  • Certified Ethical Hacker (CEH)
  • Global Information Assurance Certification Penetration Tester (GPEN)

Benefits

• The annual salary range for this position is $100,000 - $170,000.
• Comprehensive benefits package, including:
  • Medical, dental, and vision insurance
  • 401(k) plan with company matching
  • Tax-deferred savings options
  • Supplementary benefits
  • Paid time off
  • Professional development opportunities