• Join a premier technology firm specializing in innovative solutions. 
• Be part of a collaborative, inclusive, and innovative work culture. 
• Enjoy tremendous growth potential in a high-performing team environment. 
• A robust benefits package:
  • Health, dental, and vision insurance 
  • Life insurance 
  • Short-and-long term disability 
  • Paid time off (PTO) 
  • 401k retirement plan with employer match
  • Annual Professional Development Reimbursement Program 
  • And more!

The selected candidate will be responsible for identifying points of vulnerability and non-compliance with established Information Assurance (IA) guidelines and regulations, recommending mitigation strategies, and assisting users as needed in a classified computing environment.

The ideal candidate will be capable of working independently and as part of a team alongside IT analysts, system administrators, and engineers. This position requires strong verbal and written communication skills, the ability to perform in a high-energy operational environment, and adaptability to shifting priorities and regulatory requirements.

Key Responsibilities

Security Monitoring & Analysis

• Perform continuous monitoring, analysis, and response to information system, network, and security events.
• Utilize endpoint security tools such as Trellix and Microsoft Defender to identify and respond to threats.

STIG Application & Compliance

• Implement and maintain Security Technical Implementation Guides (STIGs) on endpoint systems and security tools.
• Conduct recurring STIG compliance assessments using SCAP Compliance Checker and STIG Viewer.
• Document STIG configurations, findings, and remediation actions to ensure audit readiness.

Patching & System Updates

• Manage and deploy operating system and application patches in accordance with federal and DoD patch management policies.
• Coordinate patch schedules to minimize operational impact while meeting compliance deadlines.
• Verify patch deployment success and troubleshoot issues related to updates.

System Hardening

• Harden systems by applying best practices and federal security guidelines to reduce attack surfaces.
• Maintain configuration baselines and ensure compliance with DoD and NIST security standards.

Incident Response & Risk Management

• Participate in internal and external security audits, inspections, and risk assessments.
• Support continuous monitoring activities and vulnerability remediation efforts.
• Assist in identifying and responding to security incidents related to vulnerabilities or misconfigurations.
• Document incidents and contribute to after-action reports to drive continuous improvement.

Collaboration & Reporting

• Work closely with system administrators, engineers, and compliance teams to ensure cohesive security operations.
• Prepare detailed reports and briefings for federal customers related to STIG compliance, patch status, and vulnerability management.
• Develop, implement, and enforce Information Security policies and procedures.

Tools & Technologies

• Trellix
• Microsoft Defender
• SCAP Compliance Checker
• STIG Viewer
• ACAS

Required Qualifications

Education & Experience

• Bachelor’s degree with 8–12 years of relevant experience, or
• 6–10 years of Information Assurance (IA) experience in lieu of a degree
• Specific experience, education, and training may be considered in place of a formal degree

Certifications

• Current DoD 8570 baseline certification
• HBSS 301 Certification

Technical Expertise

• Strong understanding of the Risk Management Framework (RMF) and applicable NIST, ICD, and CNSS standards
• Proven experience with STIG compliance, SCC, STIG Viewer, and ACAS
• Familiarity with LAN/WAN network technologies and security best practices within a classified environment, including cryptography and key management
• Expert-level experience with Microsoft Windows, Linux, and system virtualization in a secure network environment

Professional Skills

• Ability to operate effectively in a constantly evolving regulatory environment with short-, mid-, and long-term remediation timelines
• Strong team collaboration skills with the ability to adapt quickly to change
• Excellent written and verbal communication and presentation skills

Security Clearance

• Active DoD TS/SCI clearance required at time of consideration

Desired Qualifications

• CompTIA Security+, CISSP, or equivalent cybersecurity certification
• Prior experience supporting Department of Defense (DoD) information systems
• Experience with security hardening through scripting and automation
• Hands-on experience with Ansible and/or Microsoft Endpoint Configuration Manager (MECM)
• Microsoft operating system certification (e.g., MCSE Windows 7 or equivalent)
• Linux certifications such as RHCSA, CompTIA Linux+, LCFS/LCFE, or equivalent

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to our care.