Cyber Security Specialist

Position: Cyber Security Specialist
Clearance: Secret
Employee: Full Time
Location: Full Remote

Position Summary:
Emerald Technical Solutions has an immediate opening for a cyber security specialist working on development and implementation of cybersecurity strategies to protect the network against unauthorized access, data breaches, malware, and other cyber threats. You will be expected to conduct regular vulnerability assessments, penetration testing, and risk assessments to identify potential security weaknesses and recommend appropriate remediation measures. All while staying up to date on current cyber security trends, policies, and procedures.

You'll Bring These Qualifications:

• Bachelor's degree in computer science, Information Technology, or a related field.
• Relevant industry certifications (e.g., CISSP, CISM, CEH) would be an advantage.
• Minimum 5 years of experience working in the field of cybersecurity, preferably in a government or military environment.
• Solid understanding of network security principles, protocols, and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), virtual private networks (VPNs), and secure remote access.
• Proficiency in using security tools such as vulnerability scanners, SIEM (Security Information and Event Management) systems, and network monitoring solutions.
• Strong knowledge of cybersecurity frameworks, standards, and guidelines, such as NIST SP 800-53 and ISO 27001.
• Experience in conducting cybersecurity risk assessments and developing risk mitigation strategies.
• Familiarity with DoD cybersecurity policies, regulations, and procedures, including RMF, STIGs, and DoD 8570 requirements.
• Excellent problem-solving and analytical skills, with the ability to quickly identify and resolve complex cybersecurity issues.
• Effective communication and interpersonal skills, with the ability to collaborate and coordinate with cross-functional teams.

Responsibilities:

• Develop and implement robust cybersecurity strategies to protect the network against unauthorized access, data breaches, malware, and other cyber threats.
• Conduct regular vulnerability assessments, penetration testing, and risk assessments to identify potential security weaknesses and recommend appropriate remediation measures.
• Monitor network traffic and security events using industry-leading security tools to detect and respond to potential security incidents promptly.
• Investigate and analyze security incidents, determine the root cause, and implement measures to prevent similar incidents in the future.
• Collaborate with network administrators and system engineers to ensure the proper configuration and secure operation of network devices, servers, and other infrastructure components.
• Develop and deliver cybersecurity awareness and training programs to enhance the overall security posture of the network.
• Stay up to date with the latest cybersecurity trends, vulnerabilities, and best practices, and proactively propose innovative solutions to address emerging threats.
• Maintain documentation related to cybersecurity policies, procedures, incident response plans, and security configurations.
• Support compliance with relevant cybersecurity standards, regulations, and guidelines, such as the Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Risk Management Framework (RMF).
• Support Authority to Operate (ATO) accreditation efforts.
• Maintain Continuous Monitoring: Lead efforts to continuously monitor the security posture of information systems that have received an Authority to Operate (ATO). Ensure compliance with federal and industry security requirements by evaluating the effectiveness of current security controls.
• Analyze Security Data: Collect, review, and analyze data from security tools, including vulnerability scanners, SIEM (Security Information and Event Management) systems, IDS/IPS (Intrusion Detection/Prevention Systems), and configuration management tools, to identify potential vulnerabilities or misconfigurations.
• Develop and Implement Monitoring Plans: Establish and maintain a comprehensive continuous monitoring strategy, including the implementation of monitoring tools and techniques to track system security status and performance metrics.
• Security Control Validation: Regularly assess security controls and make recommendations to maintain system security in alignment with applicable risk management frameworks (e.g., NIST RMF). Validate that implemented controls continue to function as intended and are effective at mitigating threats.

Travel Required

• None anticipated

Additional Information

• Pay Range: The proposed salary range for this position is $130,000-$160,000

We offer competitive compensation, benefits and learning and development opportunities.