Cyber Security Specialist - Level II

On Assignment - Falls Church, VA

Full-time - Mid Level

Falls Church, VA

Administrative and Support Services

About the position

ECS is seeking a skilled and experienced Cyber Security Specialist - Level II to join our team in the National Capital Region. This position is responsible for implementing and enforcing security policies, developing and monitoring security controls, conducting compliance audits, and supporting incident response activities. The ideal candidate will have a strong background in information security and a commitment to safeguarding information systems.

Responsibilities

• Implement and enforce security policies and procedures to ensure compliance with applicable laws, regulations, and standards.
• Develop, implement, and monitor security controls to protect information systems from threats and vulnerabilities.
• Conduct regular audits and assessments to ensure compliance with security policies and regulatory requirements.
• Identify, assess, and mitigate security risks to safeguard information systems and data.
• Create and maintain security documentation, including security plans, policies, procedures, and guidelines.
• Develop and conduct security training and awareness programs to educate users on security best practices and compliance requirements.
• Support the development and execution of incident response plans to address security breaches and incidents effectively.
• Provide recommendations for security improvements based on audit findings, threat assessments, and compliance requirements.
• Prepare for security inspections and assessments by gathering necessary documentation, evidence, and reports.
• Provide support during readiness inspections, including responding to inquiries and demonstrating compliance with security policies.
• Identify deficiencies and gaps in security practices during inspections and develop corrective action plans to address them.
• Generate and submit detailed reports on inspection findings, corrective actions, and compliance status to relevant stakeholders.
• Conduct follow-up activities to ensure identified deficiencies are addressed and resolved in a timely manner.
• Implement lessons learned from inspections to improve security practices and readiness for future assessments.
• Monitor information systems for potential security threats, vulnerabilities, and incidents using various security tools and technologies.
• Analyze threat intelligence data to identify trends, patterns, and emerging threats that could impact the organization's security posture.
• Coordinate and respond to security incidents, including investigation, containment, remediation, and recovery activities.
• Generate and manage security alerts and notifications to inform relevant stakeholders about potential threats and incidents.
• Perform regular vulnerability assessments and scans to identify and mitigate security weaknesses in information systems.
• Manage and analyze security logs and event data to detect and respond to suspicious activities and anomalies.
• Produce and distribute regular reports on threat activities, incident response actions, and security posture to management and stakeholders.

Requirements

• IAT Level III - CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP; IAM Level III - CISM, CISSP (or Associate), GSLC, or CCISO CE: Associate level (professional preferred) certificate for supported technology.
• Four (4) years of progressive experience demonstrating the required proficiency.
• Bachelor's degree and/or equivalency.

Benefits

• Health insurance
• 401k
• Paid holidays
• Flexible scheduling
• Professional development opportunities