Cybersecurity Specialist at Amyx, Inc.

Sacramento, California, United States -

Full Time

Start Date

Immediate

Expiry Date

28 Apr, 26

Salary

0.0

Posted On

28 Jan, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, Risk Management Framework, Information Assurance, Vulnerability Management, Asset Management, Technical Security Safeguards, Windows Server, Networking, Cisco Network Equipment, Red Hat Enterprise Linux, Microsoft Office Products, Certification and Accreditation, Threat Assessment, Security Countermeasures, Technical Research, Compliance

Industry

IT Services and IT Consulting

Description

Overview Amyx is seeking a Cyber Security Specialist located in McClellan, CA. This position supports Department of Defense in the Cybersecurity functional area. Responsibilities The Cyber Security Specialist Level 2 will guide efforts certifying the customer information systems are compliant with NIST standards and guidelines. The systems include the Unclassified Computing Environment (DUCE), Test and Development Network (TDnet), SIPRNet Computing System (DSCS), Research and Development Network (DRDN), multiple unclassified enclaves, and all Unclassified stand-alone computers. Primary responsibility is to maintain assigned customer IT Systems RMF authorizations accurately and on schedule, while sustaining, maintaining or generating customer vulnerability management, asset management, and risk management tools and processes. Daily responsibilities include: Participating in risk assessment during the Certification and Accreditation (C&A) process. Designing, developing, implementing, and integrating information assurance architectures, systems, or system components for use within data center, network, and enclave environments. Participating in information systems risk assessments and designing security countermeasures to mitigate identified risks. Verifying architecture and design of DoD information systems (ISs) are functional and secure. As necessary, design and develop IA or IA enabled products, interface specifications, and engineer approaches to secure the environment. Assessing threats to the environment, and providing input on the adequacy of security designs and architectures. Reporting to senior IA architect, IA manager, or AO for general IA operations, with additional reporting to senior management regarding network operational requirements. Providing technical research, analysis and reports interpreting client’s vulnerabilities, while delivering technical expertise for risk management decisions and documentation requirements for DoD ISs. Analyzing trends, emerging technologies, and threats for potential impact on the security architect and posture. Developing POA&Ms and Risk Management Framework (RMF) Control artifacts as required. Collecting and addressing Information Assurance Vulnerability Management (IAVM) of Information Assurance Vulnerability Alerts (IAVA) through guidance set forth by USCYBERCOM, DISA, NIST, NSA and client for Vulnerability and Penetration Testing. Must have the ability to communicate accurate information Supported Technologies: ACAS HBSS Microsoft Office Products Cisco Network Equipment Windows Servers 2012/2016 Windows Desktop Red Hat Enterprise Linux, eMASS (Future) EiQ SecureVue operator Qualifications Required Skills and Qualifications: BA/BS in a technical discipline. Secret Clearance 5+ years of cybersecurity experience in system(s) functions, security policies, technical security safeguards, and operational security measures In-depth knowledge in providing continuous analysis, mitigation strategies, and administrative and technical implementation support for all activities associated with compliance with RMF on information systems. Thorough understanding of Windows based Client Systems, networking (TCP/IP, Ports, Active Directory, DNS, and DHCP), Switch / Router configuration, and Security CSSP-A or CSSP-AU certified. Certification in one of the following: MCP Client Certification, MTA Certification: Windows Operating System Fundamentals, MTA Certification: Windows Server Administration Fundamentals, MTA Certification: Security Fundamentals, MCSA Windows 10 certification, Microsoft 365 Certified: Security Administrator Associate, Microsoft 365 Certified: Modern Desktop Administrator Associate, MCSA Server 2012, or MCSA Server 2016. Benefits include: Medical, Dental, and Vision Plans (PPO & HSA options available) Flexible Spending Accounts (Health Care & Dependent Care FSA) Health Savings Account (HSA) 401(k) with matching contributions Roth Qualified Transportation Expense with matching contributions Short Term Disability Long Term Disability Life and Accidental Death & Dismemberment Basic & Voluntary Life Insurance Wellness Program PTO 11 Holidays Please contact talent@amyx.com with any questions! Amyx is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. Amyx is a VEVRAA federal contractor and we request priority referral of veterans. Physical DemandsEmployee needs to be able to sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear. Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. Must be able to effectively communicate with others verbally and in writing. Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Regular and predictable attendance is essential.

Responsibilities

The Cyber Security Specialist will guide efforts to certify customer information systems for compliance with NIST standards and maintain IT Systems RMF authorizations. Responsibilities include risk assessments, designing security architectures, and providing technical expertise for risk management decisions.