IS/IT SME Level V - CND

Senior Cybersecurity Engineer (CND / Continuous Monitoring) Location: Suffolk, Virginia (Onsite) Employment Type: Contract to Perm Role Overview We are seeking an IS/IT Subject Matter Expert Level V to support a Joint Training DevSecOps pipeline core infrastructure and data center. The selected candidate will be responsible for supporting the Deputy Directorate, Joint Training (DDJT) for Continuous Network Defense (CND) cybersecurity engineering. This role is 100% onsite in Suffolk, VA. Key Responsibilities Serve as the primary Subject Matter Expert (SME) for all aspects of the Continuous Network Defense cybersecurity tools in accordance with all applicable DoD Instructions (DoDI), policies and regulations. Utilize Tenable and Nessus to perform regularly scheduled discovery and vulnerability scans, provide analysis of results, and develop mitigation strategies. Manage Trellix ePO and deploy endpoint products (ENS, PA, DLP, etc.) to implement and enforce endpoint security policies. Implement ForeScout policies for the Comply-To-Connect (C2C) initiative to ensure continuous compliance and quarantine unauthorized devices. Monitor Cortex Xpanse to identify and assess external-facing assets and respond to alerts with corrective actions. Ensure continuous data flow is active for the Continuous Monitoring and Risk Scoring (CMRS) DoD system. Configure, modify, and deploy security policies on Cisco Firepower Management Console (FMC) to enforce intrusion prevention (IPS). Utilize and validate DNS and DHCP data within Infoblox, monitoring for anomalous records and unauthorized entries. Implement an AD Audit Engine to detect and investigate anomalous activity within Active Directory. Conduct threat hunts and reconnaissance using network traffic analysis, heuristic analysis, and cybersecurity data analysis to identify and mitigate indicators of compromise (IoC). Required Qualifications Clearance: Candidates must be able to obtain and/or maintain a Department of Defense (DoD) Top Secret/Sensitive Compartmented Information (TS/SCI) Security Clearance as a condition of employment. Education & Experience: A Master’s degree in Cybersecurity or a related field, or 10+ years of experience in cybersecurity engineering focused on Government-approved cybersecurity tools. Must have 5+ years of experience related to DoD cybersecurity vulnerability detection and response utilizing tools within FISMA compliance. Certifications: An active IAT Level III certification is required (e.g., CASP+, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH). A functional area training certificate is also required prior to the start date. Technical Skills: Experience with big data analytical tools such as Elasticsearch and Splunk is required. Compensation & Benefits The anticipated compensation for this position is $170,000 annually. The pay rate range is $78.00/hr to $83.00/hr. A comprehensive benefits package is available to eligible employees. Equal Opportunity Employer This employer is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. #J-18808-Ljbffr Apex Systems