MINIMUM QUALIFICATIONS:

• Must be a U.S. Citizen
• Active Secret clearance (TS Eligible)
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience
• 3+ years of cybersecurity or IT risk-management experience

PREFERRED QUALIFICATIONS:

• Experience with Tenable, Active Directory, Splunk, or endpoint-protection platforms
• Experience working in government, DoD, or healthcare environments
• Experience with IAM tools, configuration management, and policy development
• Proficiency with asset-inventory and vulnerability/risk-management platforms
• Strong analytical, communication, and documentation skills

SUMMARY OF BENEFITS

• Comprehensive Physical Wellness Package, including Medical, Dental, Vision Care, plus Flexible Spending Accounts for health- and dependent-care are included in our standard benefits plan.
• 401k Retirement Plan with Matching Contribution is immediately available and vested.
• Annual Training Budget to be used for conference attendance, school enrollment, certification programs, and associated travel expenses.
• Eleven Federal Holidays, plus three weeks of PTO/vacation/sick leave that accrues at a rate of ten hours per month.
• Employee Assistance Program: Counseling/legal assistance and other employee well-being programs are also offered.

EQUAL OPPORTUNITY EMPLOYER AS TO ALL PROTECTED GROUPS, INCLUDING PROTECTED VETERANS AND INDIVIDUALS WITH DISABILITIES.

9kh9pBe7T

• Ensure TASKORD compliance and escalate non-compliance.
• Review ACAS metrics (vulnerabilities, patching, credentialed vs non-credentialed scans, agent deployment, TASKORD 20-0020 cadence).
• Monitor ESS deployments (Trellix Agent, Policy Auditor, Data Loss Prevention, Rogue System Detection, Endpoint Security, Firewall).
• Integrate NADCOE assets into DAO scorecards and track IAVM status.
• Support CORA and ESM inspections and bi-annual subscriber assessments.
• Develop and maintain cybersecurity policy and documentation.
• Coordinate remediation with the Subscriber Management Team.
• Track and report endpoint compliance, configuration management, and access-control metrics.