Cyber Security Lead

Description

Job Description:

Are you looking for an opportunity to support the United States Department of Defense systems to ensure they are secure and reliable? Our Enterprise and Cyber Solutions Defense team is looking for an experienced Cyber Security Lead to work with our growing N2NOMS program which is situated in Colorado Springs, CO.

Our customer maintains a highly demanding mission and requires our support to provide expert technical and professional management support to the commands enterprise Information Technology (IT) services. As the Cyber Security Lead, you will lead a team of applications and system administrators responsible for the installation, configuration, administration and maintenance of the NORAD and USNORTHCOM Cyber Security Services. in this role, you will directly provide sustainment, maintenance, problem and change management services to help ensure secure, reliable, and uninterrupted availability of the Department of Defense IP networks.

Clearance: You must hold a current DoD Secret clearance to start on program and be able to successfully obtain a Top Secret/SCI clearance following hire.

What will you do in this role?

• Lead a team of applications and system administrators responsible for the installation, configuration, administration and maintenance of NORAD & USNORTHCOM Cyber Security services
• Act as a technical expert for all Cyber Security services and provide analytical details and reporting to leadership.

• Perform configuration and operation of the following:
o DISA Automated Security Compliance Assessment Solution (ACAS) - Tenable Security Center/Nessus
o Endpoint Security Solutions/Host Based Security System (ESS/HBSS), ePolicy Orchestrator (ePO) and McAfee Endpoint tools
o Splunk SIEM and Splunk Enterprise Security (SES)
o Security Content Automation Protocol (SCAP) Compliance Checker
o F5 Big IP Application Security Manager (ASM)

• Characterize and perform analysis of network traffic and system data to identify anomalous activity and potential threats to resources.
• Perform security event and incident correlation using information gathered from a variety of sources within the enterprise including McAfee ePolicy Orchestrator, ACAS and the Splunk SIEM.
• Provide training on commonly used cyber security tools
• Provide Tier 2 and 3 application support to subordinate units of NORAD & USNORTHCOM
• Provide support for Risk Management Framework (RMF) processes, including Documentation, Vulnerability Scanning, and DoD Security Technical Implementation Guides (STIGs).
• Perform software patch installation, other flaw remediation, antivirus updates, and Continuous Monitoring (ConMon) activities.
• Provide detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and insider threat activities
• Assist the Joint Cyber Center in managing information security incidents from inception to final after action reporting.
• Manage incident tickets and provide status updates on each ticket per SLA

These are the required qualifications...

• Bachelors with 8+ years of experience or Masters with 6+ years of experience; additional years of directly applicable experience may be accepted in place of a degree.
• Must hold a current and active Secret security clearance with the ability to obtain Top Secret/SCI clearance.
• Must hold current Security+ CE or other, equivalent DoD 8570 IAT II approved certification.
• Must hold an Operating Systems certification
• Must have HBSS 201, 301 and 501 training.
• Familiarity with the configuration and operation of the following: DISA Automated Security Compliance Assessment Solution (ACAS) - Tenable Security Center/Nessus, Endpoint Security Solutions/Host. Based Security System (ESS/HBSS), McAfee Endpoint tools, Splunk, System Center Configuration Manager (SCCM), Security Content Automation Protocol (SCAP) Compliance Checker.
• Possess strong cybersecurity foundation with working knowledge of cyber technologies, Risk Management Framework (RMF) process, and DoD Security Technical Implementation Guides (STIGs).
• Experience in executing the tasks associated with leading and managing small teams.

These are the preferred qualifications...
• Experience working in a Cybersecurity Operations Center environment
• Proficient in Windows Server and Red Hat Linux operating systems
• Working experience with tuning and managing cyber security tools
• Working knowledge of database and operating system security
• Experience using Microsoft Active Directory to manage group policy, computer and user objects
• Strong working knowledge of PowerShell scripting
• Ability to multi-task, work independently and as part of a team, share workloads, and deal with sudden shifts in project priorities
• Seek out information and data to evaluate, prioritize and formulate best solution or practice
• Ability to function in a fast-paced environment and effectively manage multiple tasks simultaneously; coordinating resources and ensuring scheduled goals are met
• Strong oral communication skills and ability to communicate detailed technical information on troubleshooting and implementation efforts to a non-technical customer

Salary: $90,000-$100,000.00

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.