Overview
SOSi is currently seeking an experienced Cyber Security Specialist to join our team in Ramstein AB, Germany. The Mission Partner Environment Engineering Service team at Ramstein AB, Germany is seeking an experienced Cyber Security Analyst. The candidate will be responsible for planning, implementation, and maintenance of security measures to protect information technology networks and systems. Works with customers, partners, stakeholders, and team members to develop and implement DoD security procedures.

MINIMUM REQUIREMENTS

• A current active in-scope TS/SCI.
• Bachelor of Science in Cybersecurity or Information Assurance and 4-6 years of experience.
• IAT level II certification such as System Security Certification Practitioner Certification (SSCP), Security +, or equivalent.
• PenTest+ certification.
• Knowledge of the Risk Management Framework (RMF), security principles, concepts, policies, and regulations.
• Assist in monitoring network/compute and storage environments.
• Communicating clearly, precisely to solve problem and innovate.

• Participate in the planning, design, and implementation of enterprise security architecture.
• Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures).
• Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
• Perform the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.
• Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.).
• Maintain operational configurations of all in-place security solutions as per the established baselines.
• Monitor all in-place security solutions for efficient and appropriate operations.
• Review logs and reports of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.
• Participate in investigations into problematic activity and perform incident response functions as needed.
• Participate in the design and execution of vulnerability assessments, penetration tests and security audits.
• Aid in the development of business continuity and disaster recovery plans and maintain current knowledge of plan executables.
• Respond to emergency network outages in accordance with business continuity and disaster recovery plans.
• Coordinate with end users and technical staff to implement and maintain systems that utilize industry best practices to meet business objectives, while maintaining the security and integrity of the data, system, and network.
• Maintains current knowledge of relevant hardware and software applications as assigned.
• Researches and recommends technical solutions for system upgrades.
• Participate in special projects as required.