Cybersecurity Lead

Responsibilities

Cardinal Technology Systems Corp. is a government IT solutions provider servicing commercial and government initiative in various parts of the United States. We are currently seeking a Cybersecurity Lead to work for our company.

Summary

• Must possess IT-II security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC). (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies)
• Provides expert support, research and analysis of exceptionally complex problems, and processes relating to them.
• Serves as technical expert to the Cybersecurity Assessment Program providing technical direction, interpretation, and alternatives to complex problems.
• Thinks independently and demonstrates exceptional written and oral communications skills; applies advanced technical principles, theories, and concepts.
• Contributes to the development of new principles, concepts, and methodologies.
• Works on unusually complex technical problems and provides highly innovative and ingenious solutions.
• Recommends cybersecurity software tools and assists in the development of software tool requirements and selection criteria to include the development of product specific STIGs from applicable DISA SRGs.
• Works under consultative direction toward predetermined long-range goals and objectives. Assignments are often self-initiated.
• Determines and pursues courses of action necessary to obtain desired results.
• Develops advanced technological ideas and guides their development into a final product.
• Expertise is in the area of cybersecurity and evaluations.
• Must be willing and able to travel to the client site in Washington, DC approximately 25% annually.

Requirements

• Must possess IT-II security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC). (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies)
• Must currently have or be willing to obtain one of the following certifications: Oracle Cloud Infrastructure (OCI) Foundations 2020 Certified Associate, Oracle Certified Associate (OCA), Oracle WebLogic Server 12c Administrator, Oracle Java SE 8 Programmer I, Oracle Enterprise Manager 12c Essentials (OEM 12c), Oracle Business Intelligence Publisher (BIP) 12c R1: Fundamentals, Oracle Planning 202x Certified Implementation Specialist (CIS), and Oracle Identity Governance 12c: Essentials.
• Must have one of the following Command Cyber Readiness certifications: Retina scan analysis, Operating Systems (Windows, Unix), Boundary defense (network policy, router, firewall), Internal defense (L2 switch, L3 switch), DNS (policy, BIND/Windows), HBSS (remote console, AV, ABM, PA, HIPS, ePO), Traditional security (Common, Basic, NCV, SCV), Wireless communications (BES, handhelds).
• Must hold one of the following IAM Level III Certifications: CISM, CISSP, GSLC.
• Must hold one of the following IAT Level II Certifications: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, CASP CE, CCNP Security, CISA, CISSP, GCED, GCIH.
• As a DISA FSO certified Team Lead, must hold a certification in penetration testing, such as: Licensed Penetration Tester (LPT), Certified Expert Penetration Tester (CEPT), Certified Ethical Hacker (CEH), Global Information Assurance Certification Penetration Tester (GPEN).
• Must have 7+ years of IT experience.
• Must have 4+ years of IA experience.
• Must have 3+ years of experience with DoD Vulnerability Management Systems.
• Must have 10+ years of experience supporting DoD or Federal Oracle shared service providers.
• Must have 10+ years with Oracle EBS R12.2 platform or higher.
• Must have previous experience performing CCRI/ vulnerability assessment/ penetration testing on networks, databases, computer applications and IT frameworks.
• Must have deep experience implementing and configuring networks and networks components.
• Must have deep knowledge and understanding of DOD security regulations, DISA STIGs.
• Must have deep knowledge of SCAP.
• Must have deep knowledge of RMF.
• Must have knowledge of the following: VULNERATOR, USCYBERCOM CTO Compliance Program, Wireless vulnerability assessment, Web Services (IIS, Apache, Proxy), Database (SQL Server, Oracle), Email Services (Exchange), Vulnerability Scans (NESSUS, SCCM), Knowledge of Phishing exercises, USB Detect and Physical Security.
• Must have deep expertise in the area of cybersecurity and evaluations.
• Must have strong analytical and problem-solving skills for resolving security issues.
• Must have excellent written and oral communication skills.
• Must be able to work independently and as a part of a team.
• Must be willing and able to travel to the client site in Washington, DC approximately 25% annually.

Benefits

• Medical, Dental, Vision Benefits
• Paid Life
• Paid Vacation, Holidays, Sick Leave, Floating Holidays, Bereavement Leave
• Semi-monthly pay cycle

Work With Us Cardinal Technology Systems, Corp (“CTech-Sys”), www.ctech-sys.com, is an SBA Certified 8(a) and HUBZone company located in the National Capital Region (NCR) and serves both government and commercial clients such clients as US CBP, US CIS, DLA, DFuse Technologies, and American Environmental Engineering Consultants. Cardinal Technology Systems, Corp is an Equal Employment Opportunity employer and it's our policy to consider applicants for employment without regard to sex, race, color, creed, religion, national origin, sexual orientation, marital status, age, disability, veteran status, alienage, ancestry, or any other factors prohibited by law. Employment selections are based on company and client requirements and the qualifications and skills of the candidate. CTech-Sys is committed to actively capitalizing on the diversity of skills, talents and perspectives of our employees. Apply tot his job Apply To this Job