IS/IT SME Level V - CND

Job Title: IS/IT Subject Matter Expert Level V (Elastic Focused) Location: Suffolk, Virginia 23435 (100% onsite) Terms: Contract to Hire Clearance Level: Secret Summary Looking for an IS/IT Subject Matter Expert Level V to support the JS J7 Joint Training DevSecOps pipeline core infrastructure and data center in Suffolk, VA. The selected candidate will support the Deputy Directorate, Joint Training (DDJT) for Continuous Network Defense (CND) cybersecurity engineering. Responsibilities Serve as the primary Subject Matter Expert (SME) for all aspects of the Continuous Network Defense cybersecurity tools in accordance with relevant DoD instructions and regulations. Utilize Tenable and Nessus to perform scheduled discovery and vulnerability scans, analyze results, and develop mitigation strategies to reduce risk. Manage Trellix ePO and deploy endpoint products such as ENS, PA, DLP, etc., to enforce endpoint security policies. Implement ForeScout policies for the Comply-To-Connect (C2C) initiative to ensure continuous compliance and quarantine unauthorized devices. Monitor Cortex Xpanse to identify and assess external-facing assets, responding to alerts and mitigating findings. Ensure continuous data flow for Continuous Monitoring and Risk Scoring (CMRS) system, including endpoint security data (Trellix), vulnerability remediation (Tenable), and compliance data (ForeScout). Configure, modify, and deploy security policies in Cisco Firepower Management Console (FMC) to enforce intrusion prevention (IPS). Utilize and validate DNS and DHCP data within Infoblox, monitoring for anomalous records and removing duplicates. Implement AD Audit Engine to detect and investigate anomalous or malicious AD activity. Conduct threat hunts and reconnaissance using network traffic analysis, heuristic analysis, and cybersecurity data analysis to identify and mitigate indicators of compromise, misconfigurations, and advanced persistent threat actors. Certifications (IAT Level II) CySA+ Security+ CCNA – Security

GICSP

GSEC SSCP Required Skills and Experience Master’s degree in Cybersecurity or related field, or at least 10 years of experience in cybersecurity engineering focused on government‑approved tools. At least 5 years of experience in DoD cybersecurity vulnerability detection and response using FISMA‑compliant tools. Experience with big data analytics tools such as Elasticsearch and Splunk. Seneca Resources is a proud Equal Opportunity Employer, committed to fostering a diverse and inclusive workplace where all qualified individuals are encouraged to apply. #J-18808-Ljbffr Seneca Resources Company, LLC