Cyber Security Specialist II (Mid-Level)

About the role

The Cyber Security Specialist II is responsible for protecting, monitoring, and maintaining Information Systems (IS) security across enterprise networks and mission-critical environments supporting Marine Corps Enterprise Network (MCEN) operations. This position ensures the confidentiality, integrity, availability, authentication, and non-repudiation of information systems through the implementation and management of cybersecurity tools, security policies, incident response processes, and defensive cyber operations. The incumbent will support cybersecurity compliance initiatives, perform continuous monitoring activities, investigate security incidents, maintain security infrastructure, and ensure adherence to Department of Defense (DoD), Marine Corps, and Government cybersecurity requirements.

Work environment is primarily office and secure government facility; may require work in classified environments, after-hours support, incident response, or emergency operations, and occasional travel based on mission needs.

Responsibilities

• Ensure the confidentiality, integrity, availability, authentication, and non-repudiation of information systems and data.
• Implement, maintain, and monitor cybersecurity controls across enterprise networks and communication systems.
• Verify compliance with established security policies, standards, and government regulations.
• Develop, implement, and execute government-approved information security policies, procedures, and plans.
• Identify, analyze, investigate, and respond to cybersecurity incidents.
• Conduct forensic analysis and support remediation activities following cybersecurity events.
• Monitor security alerts and vulnerabilities utilizing automated cybersecurity tools.
• Produce cybersecurity metrics, reports, and operational statistics.
• Implement and maintain network security measures to protect information systems and infrastructure.
• Operate, manage, and monitor: Host-Based Security System (HBSS), Firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Virtual Private Networks (VPN), Web and Database Firewalls, Security Information and Event Management (SIEM) platforms, and other security tools and technologies.
• Ensure workstations and servers remain compliant with Marine Corps cybersecurity requirements.
• Conduct security assessments and support vulnerability management activities.
• Monitor and analyze system and network security events utilizing: McAfee HBSS, Tenable SecurityCenter, RedSeal, McAfee SIEM, Imperva Web Application Firewall (WAF), and related cybersecurity platforms.
• Support information security incident handling and reporting.
• Participate in incident containment, eradication, recovery, and lessons-learned activities.
• Assist with Continuity of Operations Planning (COOP) and Disaster Recovery (DR) initiatives.
• Support certification, accreditation, and authorization activities for information systems and networks.
• Operate and maintain Public Key Infrastructure (PKI) components.
• Support Electronic Key Management System (EKMS) operations.
• Manage and monitor network intrusion detection and forensic systems.
• Assist with implementation of enterprise security architectures and defensive cybersecurity measures.

Requirements

• Education: High School Diploma or equivalent required.
• Experience: Minimum of five (5) years of cybersecurity, information assurance, network security, or related experience.
• Certifications: Current CompTIA Security+ certification required.
• Security Clearance: Active Secret Clearance required.

Qualifications

• Experience supporting Department of Defense (DoD) or Marine Corps network environments.
• Experience with Risk Management Framework (RMF) processes.
• Knowledge of DoD cybersecurity regulations, directives, and security standards.
• Experience with security incident response and digital forensics.
• Familiarity with enterprise vulnerability management tools and compliance monitoring solutions.

Skills

• Strong knowledge of cybersecurity principles, methodologies, and best practices.
• Experience with enterprise security monitoring and threat detection technologies.
• Ability to investigate and analyze cybersecurity incidents.
• Knowledge of intrusion detection and prevention systems.
• Understanding of PKI, encryption technologies, and key management principles.
• Familiarity with vulnerability assessment and remediation processes.
• Strong analytical, problem-solving, and troubleshooting skills.
• Ability to work effectively in a fast-paced, mission-critical environment.
• Strong written and verbal communication skills.

Pay

The anticipated salary range for this role is $70,000 to $90,000 annually. The anticipated salary range