Information Assurance / Cybersecurity Specialist II

Cask is a leading Management Consulting firm specializing in delivering business and technical expertise to clients across commercial and government markets. Join the many happy employees at Cask! We have been named a top 5 firm to work for by Consulting Magazine for 5 of the past 6 years.
Cask is seeking an experienced and technical Information Assurance / Cybersecurity Specialist with a skill set that includes Cybersecurity, Information Security, Info Sec Architecture, IS Auditing, Mobile Technologies, Network Security Management, Network Security Technologies, Network Technology, Teamwork, Initiative, Creative Thinking, Telecommunication Technology, Risk Management, Software Security Assurance, Strategic Planning, Tactical Planning, Software Security Assurance, and Static Code Analysis Tools and Techniques. This position is responsible for designing systems that would limit the possibility of attacks on information systems and developing systems for responding to and recovering from such attacks.

Responsibilities

• Identify security risks, threats, and vulnerabilities of networks, systems, applications, and new technology initiatives.
• Develop, test, and operate firewalls, intrusion detection systems, enterprise anti-virus systems, and software deployment tools. 
• Test and debug programs and scripts and prepare instructions for network exploitation activities. 
• Apply knowledge of current IA policy, tactics, techniques, policy, doctrine, and relationship to IA reporting requirements and structure. 
• Assist in the planning and implementation of requirements.

Requirements

• Minimum of Bachelor’s Degree or higher in relevant field.
• Minimum 5 years of related experience.
• 2 years of experience as an Information Systems Security Engineer (ISSE)/Information Systems Security Officer (ISSO), preferably of a Software Application.
• 2 years of experience executing static application security testing (SAST), analyzing test results, and developing remediation and mitigation recommendations.
• 2 years of experience performing risk and vulnerability assessments for Risk Management Framework (RMF) per USMC Enterprise Cybersecurity Manual (ECSM) 018.
• 5 years of experience implementing cybersecurity in accordance with DoDI 8500.01, Security Technical Implementation Guide (STIG), Security Content Automation Protocol (SCAP), and Assured Compliance Assessment Solution (ACAS) and cybersecurity solutions.
• 3 years of experience working in a matrix product team environment.
• 3 years of experience developing, managing, and reporting on a Plan of Action and Milestones (POA&M).
• At least one or more of the following baseline cybersecurity certifications: CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP are required.
• At least one or more commercial operating environment certifications:  Microsoft Server, Windows Desktop, Linux, Red Hat, Azure, AWS, Cisco are required.

Cask is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, age, status as a protected veteran, among other things, or status a qualified individual with a disability.  EEO/Employer/Vet/Disabled