Quick Summary
Senior IT Security Specialist (Computer Systems Security Analyst 4)
Location: Arlington, VA, Remote, United States (Preference for Washington DC metro area)
Employment Type: Full Time/Salaried/Exempt
Anticipated Salary Range: $109,272.00 - $160,000.00
Security Clearance: Ability to Obtain
Level of Experience: Senior
Required Travel: 0 - 10%
Job Description
Mission Technologies, a division of HII, is seeking an IT Security Specialist to support the United States Postal Service (USPS) Office of Inspector General (OIG). This role is responsible for the application security function, information technology security (Cybersecurity/InfoSec) engineering, and design, serving as a technical expert authority. The specialist safeguards the sensitive information resources critical to the OIG's mission.
Essential Job Responsibilities
The specialist will solve significant problems complicated by interfaces and inter-relationships between programs, systems, functions, applications, and critical issues for agency-wide IT solutions, operations, and maintenance supporting infrastructure, systems, and information security.
Security Systems Management and Administration:
- Manages and administers a wide range of security systems and tools.
- Administers cloud-based security tools including Azure Security Center (Sentinel, Log Analytics, Azure WAF, Defender for Identity, Privileged Identity Manager); Microsoft 365 Security Suite (Defender, Advanced Threat Protection, Cloud Application Security, Protection Portal); Microsoft Security and Compliance Center; Microsoft Endpoint Manager (Intune); multi-factor authentication (MFA); web content filtering; and secure document sharing solutions.
- Responsible for primary or alternate management of all IT Security systems, including patch management, upgrades, integration engineering, and reporting.
Security Operations and Compliance:
- Manages security incident detection, response, and remediation.
- Conducts cyber threat and vulnerability analysis and remediation.
- Develops security metrics and manages reporting and compliance.
- Serves as Incident Response Team member.
- Supports operational implementation of FISMA/NIST standards and industry best practices.
- Manages IT Security awareness training program in coordination with the Learning Management team.
- Manages Password Management system.
- Responds to IT Security trouble tickets, identifying and executing solutions to maintain service level agreements.
Security Engineering and Technical Expertise:
- Identifies security risks and recommends risk mitigation strategies.
- Reviews new and existing systems to ensure baseline security requirements are met and recommends security enhancements.
- Develops security architecture and technical solutions for security products.
- Collaborates with staff to develop security controls and solutions for complex business systems and applications.
- Develops and executes project plans to engineer, construct, deploy, and monitor/manage IT Security infrastructure solutions.
- Demonstrates in-depth understanding of security requirements associated with cloud-hosted environments, services, and solutions.
- Evaluates, recommends, and implements security controls for cloud-hosted environments and mobile device solutions.
Minimum Qualifications
- 9 years relevant experience with a Bachelor's degree in a related field; OR 7 years relevant experience with a Master's degree; OR 4 years relevant experience with a PhD/Juris Doctorate; OR High School Diploma/equivalent and 13 years relevant experience.
- Client Requirement: Bachelor's Degree in Cybersecurity/Information Technology Security or related field with at least 5 years of specialized experience in performing application security assessments and specialized experience in secure SDLC and source code analysis (manual & tools) on Web-based Applications.
Required Certifications & Specialized Experience:
- Must have a current industry certification in one or more of the following (or equivalent): CSSLP, CCSP, OSCP, CASE, GWEB, Azure Developer Associate.
- Must have one of the following Microsoft certifications: Microsoft 365 Certified Security Administrator Associate or Microsoft Certified Azure Security Engineer Associate.
- Must have hands-on experience with Static and Dynamic Application Security Testing (SAST/DAST) using tools like HP Fortify, HP WebInspect, HCL Appscan, Snyk, Checkmarx, Synopsys, or Veracode.
- Must have specialized experience in Continuous Integration (CI) and Continuous Deployment (CD) practices.
- Must have specialized experience in manual code review to identify potential vulnerabilities and best coding practices.
- Must have specialized experience in application vulnerability and security assessments using various tools like Burp Suite Pro, OWASP Zap Proxy, DirBuster, Kali Linux, Metasploit Pro, Accunetix, Insight AppSec, GitLab, Coverity, Fortify, or GitHub Enterprise.
- Must have specialized experience creating security testing pipelines and test plans.
- Must have specialized experience in implementing and deploying an organization-wide Application Security program at the enterprise level.
- Must have knowledge of coding languages such as Java, .NET, Python, PHP, C++, C#.
- Must have extensive experience in preparing test Plans, writing test Cases, test Execution and follow up remediation efforts.
- Ability to plan, organize, and manage tasks on time with minimal supervision, working independently or in a team.
Client Security Requirements
- Must be able to obtain and maintain a USPS Sensitive Clearance.
- Must be a U.S. Citizen.
- Subject to a pre-employment background investigation and drug screening.
Preferred Requirements
- An active Secret security clearance is preferred.
- An advanced degree in Cybersecurity or related field is desired.
About HII Mission Technologies
HII's Mission Technologies division delivers all-domain expertise and advanced technologies to mission partners globally. We accelerate national security solutions across C5ISR, AI and Big Data, cyber operations, synthetic training environments, fleet sustainment, environmental remediation, and unmanned underwater vehicles. HII is recognized as one of America’s top large company employers, offering competitive benefits and a supportive environment for career growth.
To learn more about Mission Technologies, click here for a short video: https://vimeo.com/732533072