Cybersecurity Administrator

Career Opportunities with QED Systems Inc A great place to work. Share with friends or Subscribe! Are you ready for new challenges and new opportunities? Join our team! Current job opportunities are posted here as they become available. Subscribe to our RSS feeds to receive instant updates as new positions become available. Job Category Information Technology/Systems Job Status Full Time Salary Range $40 - $55/hr Job Description The Cybersecurity Administrator is responsible for implementing and maintaining the security controls required for CMMC (Cybersecurity Maturity Model Certification) Level 2 across the enterprise, in accordance with NIST SP 800-171, Protecting Controlled Unclassified Information. The administrator will maintain and improve the organization’s System Security Plan (SSP) and Plan of Action and Milestones (POA&M), support assessment readiness with the company’s C3PAO and DIBCAC, and help sustain the security of Controlled Unclassified Information (CUI). The Cybersecurity Administrator shall have experience with boundary defense techniques, commercial off-the-shelf (COTS) security products, and cloud services used to meet the enterprise’s system security objectives. Duties and Responsibilities Plan, develop, implement, test, and document security controls to meet CMMC Level 2 (NIST SP 800-171) requirements Develop and enforce information security policy Perform IT risk and security assessments and support risk mitigation efforts Assess flow-down of DFARS requirements to subcontractors and support vendor/supply-chain risk reviews Develop approaches to mitigate vulnerabilities and recommend changes to systems or components as needed Facilitate an IT business continuity plan Perform internal security control assessments and self-assessments, including SPRS scoring support Identify information protection needs for the computing and network environments Develop, maintain, and analyze the System Security Plan (SSP) and associated cybersecurity risk analysis Advise network, system, and software engineers on the results of cybersecurity risk analysis Execute and support network security initiatives Conduct vulnerability scanning Ensure patch compliance Support incident response and remediation efforts Participate in assessment activities, including interviews, documentation requests, and artifact requests Review responses and deliverables for accuracy and assist with interpreting assessment requests Review assessment findings and assist management in developing responses and remediation plans Create, track, and provide status updates on Plan of Action and Milestones (POA&M) items Develop, update, and maintain metric/KPI status reports on a defined schedule for IT initiatives Respond to requests for clarification and information Oversee and provide technical guidance to Cybersecurity Analysts Job Requirements / Skillsets Experience implementing controls to meet NIST SP 800-171 requirements Experience designing and maintaining a System Security Plan (SSP) Experience performing security audits with and without specialized SIEM tools Experience certifying or validating compliance of information systems Current certification compatible with IAT Level III in accordance with DoD 8140 (formerly DoD 8570.01-M), or the ability to obtain one within six months of hire Comprehensive understanding of computer security and the ability to communicate clearly and succinctly in written and oral presentations Working knowledge of a vulnerability management system Experience utilizing MS Purview and Data Loss Prevention (DLP) policies Experience securing cloud-based security controls Job Preferences Current ISC2 CISSP certification Experience developing and testing an Incident Response Plan Experience with network administration Experience with system administration Experience implementing or managing FedRAMP-authorized vendor products (e.g., GCC High) Experience in a classified environment Education Bachelor’s degree in computer science, Information Technology, Computer Information Systems, or a related field and 5 years of experience in the field or a related area; or a Master’s degree in a related field and 2 years of experience in the field or a related area. Active industry cybersecurity certifications (ISC2, CompTIA, Cisco, Microsoft) may substitute for some years of experience depending on the certification. Security Clearance Requires U.S. citizenship and the ability to obtain a DoD Secret clearance. Q.E.D. offers competitive benefits such as: Paid Leave, Medical, Dental, Vision, Short/Long-Term Disability, 401(k) retirement plan, Basic Life Insurance, supplemental insurance, and an Employee Assistance Program. #J-18808-Ljbffr QED Systems Inc