60024449 - AFS Cyber Resilience and Defense Jobs

Job Description:

As a Cyber Security Engineer, you will play a critical role in safeguarding complex systems and networks by implementing and managing robust security measures.

The work you'll do:

Your primary responsibilities will include applying and maintaining security controls in compliance with ICD 503 and NIST 800-53 standards. You will assess and mitigate risks by conducting vulnerability and compliance scans using automated tools, ensuring that systems remain secure and resilient against evolving threats. This role requires you to work across diverse environments, including Linux, Windows, cloud platforms, and networking equipment, to ensure comprehensive security coverage. Additionally, you will contribute to the Intelligence Community Assessment Process, ensuring that security measures align with the unique requirements of intelligence operations.

To excel in this role, you will benefit from hands-on experience with automated vulnerability and compliance scanning tools, as well as a deep understanding of security frameworks like ICD 503 and NIST 800-53. Familiarity with implementing security controls across various operating systems, cloud infrastructures, and networking devices will be essential. A strong grasp of the Intelligence Community Assessment Process will enable you to navigate the complexities of intelligence-driven security requirements. Your ability to identify and remediate vulnerabilities, coupled with a proactive approach to compliance, will be key to ensuring the integrity and confidentiality of critical systems.

This position is ideal for someone with a background in cybersecurity, systems engineering, or a related field, who has demonstrated expertise in securing diverse technical environments. Success in this role will require a detail-oriented mindset, the ability to adapt to rapidly changing security landscapes, and a commitment to staying ahead of emerging threats. If you thrive in a dynamic, high-stakes environment and have a passion for protecting critical systems, this role offers an opportunity to make a meaningful impact.

Here's what you need:

• 7+ years of experience in IC system security
• Experience in the following areas:
  • Cloud Security
  • Cybersecurity Assessment
  • Network Security
  • ICD 503 Security Controls
  • NIST 800-53 Security Controls
  • Intelligence Community Assessment Process
  • Vulnerability and Compliance scanning with automated scanning tools
  • Implementation of security controls across Linux, Windows, Cloud, and Networking Equipment

Bonus points if you have:

• Bachelor's degree
• Field-specific skills or certifications related to Information Systems Security Engineering

Security clearance:

• Active TS/SCI with Poly security clearance is required

We are seeking a Cyber Defense Forensics Lead to oversee forensics and insider threat operations for our customer. You will lead a team of analysts conducting digital forensic investigations, monitoring data loss, and analyzing insider threats. This role requires expertise in forensic tools, incident response, and managing complex investigations.

Key Responsibilities:

• Lead the CDF team in supporting insider threat operations, DLP monitoring, and policy violation investigations.
• Conduct forensic analysis of Windows, Linux, Mac, and cloud systems.
• Maintain and modernize the client’s SOC forensics lab.
• Manage CDF investigations, documenting findings and escalating cases as needed.
• Serve as an SME in evidence preservation, chain of custody, and malware analysis.
• Develop insider threat dashboards, reports, and workflows.

Basic Qualifications:

• 7+ years of overall cybersecurity experience
• 5+ years of hands-on experience with host/network security monitoring, forensic tools, SIEM platforms, and endpoint threat detection.
• Certifications such as GCFA, GCFE, CCFP, CISM, or CISSP are highly desirable.

Preferred Skills:

• Experience working with federal or law enforcement agencies.
• Familiarity with CBP operations or similar government entities.

Job Description

The Penetration Tester will conduct comprehensive penetration tests on applications, networks, and systems. Identify and exploit security vulnerabilities to assess risk, developing detailed reports on findings, and providing recommendations for remediation. Collaborate with other cybersecurity teams to improve the overall security posture and support incident response activities when necessary. Stay current with emerging threats and vulnerabilities to enhance testing techniques. Responsible for conducting security testing and vulnerability assessments. Perform various types of penetration tests, including network, web application, and social engineering assessments. Use both manual techniques and automated tools to identify vulnerabilities, and will assist in the development of remediation plans. Participate in the development and maintenance of penetration testing methodologies and tools. Contribute to the organization's threat intelligence efforts by sharing insights gained from penetration testing activities.

Must have:

• 8 years of experience with penetration testing, vulnerability assessments or security
• Experience using automated/manual techniques and developing remediation plans
• Master's or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Assurance, Information Technology, or Software Engineering, or possess a DoD 8140 Certification.

Security Clearance:

• Active Secret, Top Secret, TS/SCI, or TS/SCI with Polygraph clearance required, depending on position 

Job Description:

The Cybersecurity Engineer will design, implement, and manage cybersecurity solutions to ensure compliance with DoD requirements, integrating security into the DevSecOps lifecycle. Develop secure architectures, implement NIST and DoD security controls, conduct risk and vulnerability assessments, and manage tools like firewalls, intrusion detection systems, and SIEM solutions.

Responsibilities:

• Embed secure coding practices, conduct security testing (static/dynamic analysis, code reviews, penetration testing), integrate automated scans into continuous integration/continuous deployment (CI/CD) pipelines, and implement authentication, authorization, and data protection measures
• Lead threat modeling, monitor and analyze security events, execute incident response procedures, and design Zero Trust architectures.
• Developing security policies, performing audits, maintaining compliance documentation, and collaborating with teams to integrate security best practices.
• Stay current with emerging threats and technologies
• Enhance the organization's security posture and contribute to governance and threat intelligence efforts

What you need:

• Candidates must meet one of the following areas:
  
  1. Advanced Degree:
     
     • Master’s degree or Ph.D. in one of the following fields: Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering.
  2. Equivalent Training:
     Completion of one of the following accepted training programs: 
     • Control Systems Security Specialist (Advanced) Playlist
• 10 years experience with cybersecurity
• Expert knowledge in DoD-compliant cybersecurity engineering
• Proficient with security controls, assessments, and security incident response
• Must meet DoD 8140 requirements 

Security Clearance: 

• Active Secret, Top Secret, TS/SCI, or TS/SCI with Polygraph clearance required, depending on position