Information Security Specialist III (Patch Management)

$66,000 - $76,000/Yr

Na Oiwi Kane - Killeen, TX

Full-time - Mid Level

Killeen, TX

About the position

The Information Security Specialist III at KaiHonua, LLC is responsible for ensuring the confidentiality, integrity, and availability of government information assets. This role involves developing and maintaining security policies, conducting risk assessments, and managing compliance with established standards and procedures. The specialist will work closely with system owners to address vulnerabilities and implement security measures, while also participating in incident response and security architecture reviews.

Responsibilities

• Provide oversight for the Computer Network Defense-Service Provider (CNDSP).
• Work with system owners to close IAVMs/ICVMs and open Plan of Action and Milestones (POA&Ms) in a rapid fashion, in accordance with DoD instructions/directives.
• Review all POA&Ms with the Program Manager on at least a quarterly basis and update the POA&Ms accordingly.
• Provide Defense in Depth principles and technology in security engineering designs and implementation.
• Analyze existing and future systems, reviewing security architectures, and developing engineering solutions that integrate information security requirements.
• Apply security risk assessment methodology to system development, including assessing and auditing network penetration testing, antivirus deployment, risk analysis.
• Conduct Computer Incident Response Team (CIRT) activities, including forensic analysis.
• Engineer and deploy network defense countermeasures such as anti-virus, anti-spam, and intrusion detection and prevention system solutions.
• Analyze IA security events, including threat model development and resulting security risk analysis of systems.
• Review and assess information security events and logs via sophisticated security information/event manager.
• Plan, implement, and manage a Defense In Depth for the total network and/or enclaves within the network.
• Plan, respond, investigate, and report undisclosed classified incident remediation.
• Assess and mitigate system security threats/risks throughout the program life cycle.
• Validate system security requirements definition and analysis and review/approve System Security Plans for enterprise-wide architectures.
• Maintain Agency public key infrastructure system.
• Implement security designs in hardware, software, data and procedures.
• Provide support for the Department of Defense (DoD) Public Key Infrastructure (PKI) service.
• Provide Certification and Accreditation, as well as provide Automated Information System Accreditation support.
• Perform risk analysis of resources, controls, vulnerabilities, impact of losing systems' capabilities and threats to the mission objective.

Requirements

• Bachelor's Degree in Computer Science, Cybersecurity, Computer Engineering, or related discipline preferred.
• 5-7 years of experience performing Information Assurance functions and using RMF IT security controls and policies preferred.
• Must possess and maintain an IT-I level certification IAW AR 25-2 and IAT-I certification IAW DoD 8570.01-M.
• May require computing environment certificate.
• Position requires a Secret security clearance.
• Must be a US citizen.

Nice-to-haves

• Experience in Security engineering.

Benefits

• 401(k)
• Dental insurance
• Disability insurance
• Flexible spending account
• Health insurance
• Life insurance
• Paid holidays
• Paid Paternal Leave
• Tuition reimbursement