Cybersecurity Specialist 2

M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people skills clearance levels and technologies to help organizations that desire improved performance and modern sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include IT Talent Solutions Data Delivery & Analytics Cyber Security Cloud Migration Applications and Infrastructure Software Development and Finance & Accounting.

M9 Solutions is seeking a Cybersecurity Specialist 2 to work on-site in support of a government contract for a client located in Charleston SC. An active Public Trust clearance is required.

Responsibilities

• Works closely with and supports team members vendors and government customers.
• Implements Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems.
• Assists in the development and verification of documentation necessary to complete the RMF assessment and authorization process.
• Conducts ICS/SCADA system inventories following government guidance.
• Conducts vulnerability scanning and documents system vulnerabilities.
• Supports ISO standardization and quality inspections.
• Participates in continuous improvement of organizational cybersecurity posture.
• Coordinates and implements technical controls and configuration settings as part of a multidisciplinary team.

Required Skills and Qualifications

• Ability to obtain a Public Trust security clearance.
• 0 years of experience with a Masters degree in Information Technology Risk Management or Cybersecurity; or 2 years of experience with a Bachelors degree in Information Technology Risk Management or Cybersecurity; or 6 years of experience with an Associates degree in Information Technology Risk Management or Cybersecurity; or 8 years of experience with a High School diploma.
• U.S. citizenship is required for this role.
• One of the following certifications: CASP CE CISSP CISSP-ISSAP CISSP-ISSEP CSSLP CISA CISM GCED or GCIH.
• Experience working with industry and government agencies on the design of platforms and integrated systems.
• Experience working on government and/or commercial projects implementing cybersecurity requirements in a variety of industrial control systems (e.g. building management electronic security fire alarm/mass notification electrical distribution power management etc.).
• Proficiency with ACAS and HBSS and mitigation strategies.
• Experience developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems networks and data.
• Experience with assessment mitigation and closure of network vulnerabilities and vulnerability management in eMASS.
• Experience establishing managing and tracking Plans of Action and Milestones (POA&Ms).
• Experience applying STIGs to servers databases applications and other hardware using Security Readiness Review (SRR) tools (scripts and ACAS).
• Ability to identify maintain and troubleshoot control network components.
• Excellent understanding of the RMF lifecycle and NIST 800-53 controls implementation.
• Awareness of NIST Special Publication 800-82 Guide to Industrial Control Systems (ICS) Security and UFCUnified Facilities Criteria (UFC) Cybersecurity of Facility.
• Working knowledge of operational control systems and implementing a variety of security assessment tools.
• Familiarity with DoDIN CCRI/CCORI and government TASKORDS.
• Familiarity with various industry products.
• Strong oral written and presentation skills with the ability and experience communicating directly with customers.
• Demonstrated background working with multidisciplinary teams.
• Demonstrated time management and organization skills to meet deadlines and quality objectives.

Preferred Skills and Qualifications

• Strong MS Excel Word PowerPoint AutoCAD Cameo and Visio skills.

Required Experience:

IC