About This Role
This role involves a wide range of Information Technology (IT) management activities, focusing on information security for installation infrastructure or major organizational components. The specialist will serve as an Information Security (INFOSEC) administrator, managing network security scanning and monitoring.
Responsibilities
- Conduct Information Assurance Vulnerability Management (IAVM) network security scanning using Assured Compliance Assessment Solution (ACAS) scan tool, ArcSight data security analytics, and Host Based Security System (HBSS)
- Monitor and identify network and system vulnerabilities
- Manage specialty filters, sensors, and/or devices (both network and host based) designed to monitor and/or counter specific threats
- Coordinate and ensure continued compliance with applicable policy for the security, configuration, operation, maintenance, and installation of Intrusion Detection System (IDS)/Intrusion Prevention Systems (IPS); firewalls; Virtual Private Networks (VPN); Host Based Security System (HBSS); Secure Configuration Compliance Validation Initiative (SCCVI) / Secure Configuration Remediation Initiative (SCRI); System Center Configuration Manager (SCCM)/ System Center Operations Manager (SCOM) / System Management Server (SMS); and Anti-Virus Servers
- Conduct vulnerability scans and network security assessments/reports
- Ensure IAVA(s) and vulnerability assessments are generated and disseminated to appropriate technical personnel within the area of responsibility (AOR)
- Track progress towards the application of IAVA(s) and vulnerability assessments
Requirements
- At least one year of experience in enforcing and monitoring an Information Assurance/Cybersecurity Vulnerability Management (IAVM) Program
- Experience in ensuring continuous network security compliance through the use of various vulnerability scanning, monitoring, and reporting tools
- Experience in responding to a variety of network security related incidents
- Ability to research and interpret higher level policies and directives in order to make informed decisions
- Ability to brief Chain of Command on current threats or incidents affecting areas of responsibility
- Participation in various network security or accreditation related inspections
- Ability to deliver timely and courteous customer service per defined standards
- Attention to Detail: Conscientious and attends to detail when planning, prioritizing, and assisting with the daily workflow across the spectrum of Information Technology functions and resources
- Customer Service: Diagnose and resolve problems in response to customer reported problems
- Oral Communication: Advise on information systems management and provide staff with technical advice on operations and maintenance of the automated system
