IT Security Specialist

Location

Reston, VA Contract On-Site Flexibility/Remote: 100%

IT Security Specialist

The selected individual will be able to work remotely throughout the U.S.

Secret Security clearance is preferred.

Candidates must be US Citizens.

We are seeking an IT Security Specialist to join our team of qualified, diverse individuals supporting a Federal Government customer in Rosslyn, VA.

Must be able to obtain a Position of Public Trust / Moderate Background Investigation security Clearance – US Citizen and must not have traveled outside the US for a combined total of 6 months or more in last 5 years. Must have resided in the US for the last 5 years.

The IT Security Specialist is responsible for the application security function and for information technology security (Cybersecurity/Info Sec) engineering, and design and serves as a technical expert authority. The OIG's information resources are sensitive assets and are critical in the performance of its mission; therefore, information security services help safeguard the information resources entrusted to the OIG.

• Solve significant problems complicated by interfaces and inter-relationships between and among programs, systems, functions, applications, and numerous critical issues for agency-wide information technology solutions, operations, and maintenance supporting the security of agency infrastructure, systems, and information
• Manage and administer a wide range of security systems and tools:
  • Administer cloud-based security tools such as Azure Security Center (Sentinel, Log Analytics, Azure WAF, Defender for Identity, Privileged Identity Manager);
    Microsoft 365 Security Suite (Defender, Advanced Threat Protection, Cloud Application Security, Protection Portal);
    Microsoft Security and Compliance Center;
    Microsoft Endpoint Manager (Intune); multi-factor authentication (MFA); web content filtering; and secure document sharing and collaboration solutions.
  • Responsible for primary or alternate management of all IT Security systems including patch management, upgrades, integration engineering, and reporting.
• Execute security related operational activities:
  • Manage security incident detection, response, remediation.
  • Conduct cyber threat and vulnerability analysis and remediation.
  • Develop security metrics and manage reporting and compliance.
  • Serve as Incident Response Team member.
  • Support operational implementation of FISMA/NIST standards and industry best practices.
  • Operate cloud-based security tools such as Azure Security Center (Sentinel, Log Analytics, Azure WAF, Defender for Identity, Privileged Identity Manager);
    Microsoft 365 Security Suite (Defender, Advanced Threat Protection, Cloud Application Security, Protection Portal);
    Microsoft Security and Compliance Center;
    Microsoft Endpoint Manager (Intune); multi-factor authentication (MFA); web content filtering; and secure document sharing and collaboration solutions.
  • Manage IT Security awareness training program in coordination with the Learning Management team, to including developing and delivering IT Security awareness training modules.
  • Manage Password Management system in coordination with Service Deskli>
  • Respond to IT Security trouble tickets generated by customers and IT staff. Identify solutions, work with customer and OCIO team to execute solutions, and manage ticket input, updates, and resolution in the OCIO ticketing system to maintain service level agreements.
• Support Security Operations and Engineering by providing technical solution support and expertise:
  • Identify security risks and recommend risk mitigation strategies.
  • Review new and existing systems to ensure baseline security requirements are met and to recommend security enhancements.
  • Develop security architecture and technical solutions for security products.
  • Collaborate with staff from OCIO and other business components to develop security controls and solutions for complex business systems and applications.
  • Develop and execute project plans to engineer, construct, deploy, and monitor/manage IT Security infrastructure solutions.
  • Demonstrate in-depth…