REQUIRED QUALIFICATIONS/SKILLS:

• U.S. Citizenship is required
• Top Secret Clearance (Single Scope Background Investigation)
• A technical Master’s Degree and a minimum of 10 years of technical experience is required. Additional experience may be substituted for education.
• Experience with the Cybersecurity Assess and Authorize (A&A) process through the Risk Management Framework (RMF) process
• Experience in IT System Administration
• Experience with physical, environmental, and personnel security
• Experience with auditing information systems
• Experience with Security Impact Analysis for Security Related Changes
• Experience developing a System Security Plan (SSP)
• Knowledge of the mission and work environments of services activities to tailor security requirements to the needs of the activity and the requirements of DOD, USAF, and SAP security programs
• Knowledge of security equipment and devices for planning and implementing protective methods and security procedures
• Knowledge of administrative procedures associated with classified material and specialized management acquisition and logistics support processes and methods used within DOD, USAF, and other agencies
• Analytical skills and problem-solving skills
• Good organization, decision making, and verbal and written communication skills
• Excellent self-initiative and self-motivation with the ability to work under minimal supervision
• Ability to work effectively in small and large team settings to solve complex problems
• Travel up to 2-4 weeks per year
• Must be able to obtain required certifications within 6 months of hire, and maintain certifications throughout employment

PREFERRED QUALIFICATIONS/SKILLS

• Knowledge of Special Access Program (SAP), Sensitive Compartmented information (SCI), collateral and unclassified directives and policies to provide authoritative interpretation and guidance to management officials and other security specialists for resolving issues involving conflicting security requirements
• Knowledge of SAP and collateral information, industrial and personnel security disciplines and their interrelationships and applicability to supported activities
• Understanding of network security/engineering
• Experience with Security Incident Handling
• Experience with STIG compliance assessment

WHO WE ARE

At Astrion, we innovate, elevate, and shape the world of tomorrow. At our core is our purpose to “Be the Difference”. This means we encourage our employees to take action and be the driving force for positive change. We foster an environment where innovative solutions flourish, and our company continuously evolves.
We have a culture of care, empathy, and making a tangible difference within our organization and communities. We embrace continuous learning, growth, and innovation, and pushing the boundaries of what’s possible. We promote collaboration and empowering our teams is at the core of our success.

• Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security authorization package
• Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties
• Ensure all users have the requisite security clearances, authorization, need-to-know, and are aware of their security responsibilities before granting access to the Information System
• Report all security-related incidents
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package
• Serve as member of the Configuration Control Board
• Coordinate any changes or modifications to hardware, software, or firmware of a system prior to the change
• Formally notify management when changes occur that might affect system authorization
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly
• Ensure all system security-related documentation is current and accessible to properly authorized individuals
• Ensure audit records are collected, reviewed, and documented (to include any anomalies)