M9 Solutions is seeking a Cybersecurity Specialist 2 to work on-site in support of a government contract for a client located in Charleston, SC. An active Public Trust clearance is required.

Responsibilities

• Works closely with and supports team members, vendors, and government customers.
• Implements Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems.
• Assists in the development and verification of documentation necessary to complete the RMF assessment and authorization process.
• Conducts ICS/SCADA system inventories following government guidance.
• Conducts vulnerability scanning and documents system vulnerabilities.
• Supports ISO standardization and quality inspections.
• Participates in continuous improvement of organizational cybersecurity posture.
• Coordinates and implements technical controls and configuration settings as part of a multidisciplinary team.

Required Skills and Qualifications

• Ability to obtain a Public Trust security clearance.
• 0+ years of experience with a Master's degree in Information Technology, Risk Management, or Cybersecurity; or 2+ years of experience with a Bachelor's degree in Information Technology, Risk Management, or Cybersecurity; or 6+ years of experience with an Associate's degree in Information Technology, Risk Management, or Cybersecurity; or 8+ years of experience with a High School diploma.
• U.S. citizenship is required for this role.
• One of the following certifications: CASP CE, CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, CISA, CISM, GCED, or GCIH.
• Experience working with industry and government agencies on the design of platforms and integrated systems.
• Experience working on government and/or commercial projects implementing cybersecurity requirements in a variety of industrial control systems (e.g., building management, electronic security, fire alarm/mass notification, electrical distribution, power management, etc.).
• Proficiency with ACAS and HBSS and mitigation strategies.
• Experience developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Experience with assessment, mitigation, and closure of network vulnerabilities and vulnerability management in eMASS.
• Experience establishing, managing, and tracking Plans of Action and Milestones (POA&Ms).
• Experience applying STIGs to servers, databases, applications, and other hardware using Security Readiness Review (SRR) tools (scripts and ACAS).
• Ability to identify, maintain, and troubleshoot control network components.
• Excellent understanding of the RMF lifecycle and NIST 800-53 controls implementation.
• Awareness of NIST Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security and UFC 4-010-06 Unified Facilities Criteria (UFC) Cybersecurity of Facility.
• Working knowledge of operational control systems and implementing a variety of security assessment tools.
• Familiarity with DoDIN CCRI/CCORI and government TASKORDS.
• Familiarity with various industry products.
• Strong oral, written, and presentation skills with the ability and experience communicating directly with customers.
• Demonstrated background working with multidisciplinary teams.
• Demonstrated time management and organization skills to meet deadlines and quality objectives.

Preferred Skills and Qualifications

• Strong MS Excel, Word, PowerPoint, AutoCAD, Cameo, and Visio skills.