Information Systems Security Manager / Specialist

About the Role

Node is seeking an Information Systems Security Specialist to support a critical customer mission in Arlington, VA. The role involves providing advanced technical assistance, proactive hunting, rapid incident response, and investigation using host-based and network-based cybersecurity analysis capabilities.

Responsibilities

• Manage the full Risk Management Framework (RMF) lifecycle for Information Technology systems as part of a team of Information Assurance professionals.
• Assist technical/management leadership on major tasks or technology assignments.
• Establish goals and plans that meet project objectives.
• Assist in direction and control activities, ensuring technical requirements are met.
• Participate in client negotiations and interface with senior management.
• Support decision-making and provide domain knowledge critical to project implementation.
• Plan, coordinate, and implement cybersecurity measures for a lab environment.
• Help identify current security infrastructure and define future programs for the lab.
• Design, develop, engineer, and implement solutions to meet security requirements.
• Implement DHS IT security standards.
• Gather and organize technical information about the lab's mission, goals, existing security products, and ongoing programs.
• Perform risk analyses, including risk assessments.
• Plan and lead major technology assignments.
• Evaluate performance results and recommend changes for short-term project growth.
• Function as a cyber technical expert across multiple project assignments.
• Work closely with ISSM and CISO to respond to Data Calls and satisfy ATO requirements.

Requirements

• U.S. Citizenship.
• Active TS/SCI clearance.
• Ability to obtain DHS Suitability.
• 5+ years of directly relevant experience in information security management.
• Hands-on experience with Linux operating systems or Amazon Web Services.
• Experience supporting the NIST RMF process and contributing to a full ATO effort.
• Knowledge of RMF and A&A documentation (SSP, Contingency, Incident & Configuration Management planning).
• Experience working on multiple complex assignments requiring originality and innovation.
• Knowledge of Computer Network Defense (CND) policies, procedures, and regulations.
• Understanding of defense-in-depth principles and network security architecture.
• Knowledge of ATO requirements and strong experience with POAMs.
• Proficiency in Microsoft Office products (Word, Excel, PowerPoint, Visio).
• Knowledge of boundary protection, network segmentation, and authentication/access management techniques.
• Experience implementing and assessing security controls for hardware, software, and network deployments.
• Ability to collaborate with internal and external stakeholders across physical locations.

Qualifications

• BS in Information Management, Cybersecurity, Computer Science, or related field, or High School Diploma and 7+ years of information security management experience.

Skills

• Desired: Experience with RMF software (CSAM, Xacta, Archer, RegScale).
• Desired: Experience with host and network scanning software (Nessus, Security Center, Tenable, nmap, Wiz, burp).
• Desired: Experience with Endpoint Protection tools (CrowdStrike, CarbonBlack).
• Desired: Working knowledge of SIEM tools (Splunk, SOAR, ELK).
• Desired: Familiarity with role-based account processing, zero trust architectures, and scripting languages (Python, AWS CLI, Lambda, bash, PowerShell).

Desired Certifications

• DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft.

Benefits

• Medical, Dental, Vision.
• Basic Life Insurance.
• Health Savings Account.
• 401K Matching.
• Three weeks of PTO/Sick.
• 11 Paid Holidays.
• Pre-Approved Online Training.