Security & Safety|Security,Security & Safety,Security & Safety|Cybersecurity Specialist Jobs

A large Engineering customer of Marathon TS is seeking an experienced Cyber Security Specialist to join their dynamic team.

Position Responsibilities:

• Conduct ICS/SCADA system inventories following guidance including, but not limited to U.S. Army ICS Inventory Methodology and Unified Facilities Criteria (UFC) 4-010-06, Cybersecurity of Facility-Related Control Systems.
• Assist in the development and verification of documentation necessary to complete the DoD RMF assessment and authorization process.
• Implement Implementation of DoD Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems.
• Conduct vulnerability scanning and document system vulnerabilities.
• Work in a team environment alongside other cybersecurity engineers and Risk Management Framework (RMF) analysts.

Additional Preferred Qualifications:
· 5+ years of experience working with industry and government agencies on the design of ICS platforms and integrated ICS systems
· Strongly preferred: Meet the Department of Defense Directive (DoDD) 8570.01 "Information Assurance Training, Certification, and Workforce Management” and DoD 8570-M "Information Assurance Workforce Improvement Program” requirements for IAM (Information Assurance Manager) Level 3, IAT (Information Assurance Technical) Level 3, OR IASAE (Information Assurance System Architect and Engineer) Level 3
· Familiarity with various industry ICS products
· Experience implementing a variety of security assessment tools
· Implementation of DoD Security Technical Implementation Guides (STIGs)
· Security Readiness Review (SRR) Tools (scripts and OVAL Benchmarks, ACAS, Wireshark)
· Excellent understanding of the DoD RMF lifecycle and NIST 800-53 controls implementation
· Strong written and verbal communication skills Ability to coordinate with and support multiple team members, vendors, and government customers
· Ability to identify, maintain, and troubleshoot HMI components
· Ability to identify, maintain, and troubleshoot control network components
· Ability to interpret drawings both mechanical and electrical
· Ability to identify, maintain, and utilize SCADA systems and KPI's
· Ability to train others with lesser skills
· Ability to access all levels and areas of the facility
· Working knowledge of EMS/SCADA or other operational control systems.
· Knowledge of SCADA protocols like Modbus, IEC (phone number removed)-101 or 104, IEC 61850 and DNP3 and other major SCADA protocols

#CJJOBS

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status ").

A large Engineering customer of Marathon TS is seeking an experienced Cyber Security Specialist to join their dynamic team.

Position Responsibilities:

• Conduct ICS/SCADA system inventories following guidance including, but not limited to U.S. Army ICS Inventory Methodology and Unified Facilities Criteria (UFC) 4-010-06, Cybersecurity of Facility-Related Control Systems.
• Assist in the development and verification of documentation necessary to complete the DoD RMF assessment and authorization process.
• Implement Implementation of DoD Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems.
• Conduct vulnerability scanning and document system vulnerabilities.
• Work in a team environment alongside other cybersecurity engineers and Risk Management Framework (RMF) analysts.

Additional Preferred Qualifications:
· 5+ years of experience working with industry and government agencies on the design of ICS platforms and integrated ICS systems
· Strongly preferred: Meet the Department of Defense Directive (DoDD) 8570.01 "Information Assurance Training, Certification, and Workforce Management” and DoD 8570-M "Information Assurance Workforce Improvement Program” requirements for IAM (Information Assurance Manager) Level 3, IAT (Information Assurance Technical) Level 3, OR IASAE (Information Assurance System Architect and Engineer) Level 3
· Familiarity with various industry ICS products
· Experience implementing a variety of security assessment tools
· Implementation of DoD Security Technical Implementation Guides (STIGs)
· Security Readiness Review (SRR) Tools (scripts and OVAL Benchmarks, ACAS, Wireshark)
· Excellent understanding of the DoD RMF lifecycle and NIST 800-53 controls implementation
· Strong written and verbal communication skills Ability to coordinate with and support multiple team members, vendors, and government customers
· Ability to identify, maintain, and troubleshoot HMI components
· Ability to identify, maintain, and troubleshoot control network components
· Ability to interpret drawings both mechanical and electrical
· Ability to identify, maintain, and utilize SCADA systems and KPI's
· Ability to train others with lesser skills
· Ability to access all levels and areas of the facility
· Working knowledge of EMS/SCADA or other operational control systems.
· Knowledge of SCADA protocols like Modbus, IEC (phone number removed)-101 or 104, IEC 61850 and DNP3 and other major SCADA protocols

#CJJOBS

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status ").

A large Engineering customer of Marathon TS is seeking an experienced Cyber Security Specialist to join their dynamic team.

Position Responsibilities:

• Conduct ICS/SCADA system inventories following guidance including, but not limited to U.S. Army ICS Inventory Methodology and Unified Facilities Criteria (UFC) 4-010-06, Cybersecurity of Facility-Related Control Systems.
• Assist in the development and verification of documentation necessary to complete the DoD RMF assessment and authorization process.
• Implement Implementation of DoD Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems.
• Conduct vulnerability scanning and document system vulnerabilities.
• Work in a team environment alongside other cybersecurity engineers and Risk Management Framework (RMF) analysts.

Additional Preferred Qualifications:
· 5+ years of experience working with industry and government agencies on the design of ICS platforms and integrated ICS systems
· Strongly preferred: Meet the Department of Defense Directive (DoDD) 8570.01 "Information Assurance Training, Certification, and Workforce Management” and DoD 8570-M "Information Assurance Workforce Improvement Program” requirements for IAM (Information Assurance Manager) Level 3, IAT (Information Assurance Technical) Level 3, OR IASAE (Information Assurance System Architect and Engineer) Level 3
· Familiarity with various industry ICS products
· Experience implementing a variety of security assessment tools
· Implementation of DoD Security Technical Implementation Guides (STIGs)
· Security Readiness Review (SRR) Tools (scripts and OVAL Benchmarks, ACAS, Wireshark)
· Excellent understanding of the DoD RMF lifecycle and NIST 800-53 controls implementation
· Strong written and verbal communication skills Ability to coordinate with and support multiple team members, vendors, and government customers
· Ability to identify, maintain, and troubleshoot HMI components
· Ability to identify, maintain, and troubleshoot control network components
· Ability to interpret drawings both mechanical and electrical
· Ability to identify, maintain, and utilize SCADA systems and KPI's
· Ability to train others with lesser skills
· Ability to access all levels and areas of the facility
· Working knowledge of EMS/SCADA or other operational control systems.
· Knowledge of SCADA protocols like Modbus, IEC (phone number removed)-101 or 104, IEC 61850 and DNP3 and other major SCADA protocols

#CJJOBS

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status ").

Position Overview

The Information Systems Security / Defensive Cyber Operations Specialist is responsible for protecting the confidentiality, integrity, availability, authentication, and non-repudiation of government information systems and networks. This position supports cybersecurity operations across enterprise environments by implementing security controls, monitoring network and system activity, responding to cybersecurity incidents, maintaining compliance, and supporting defensive cyber operations.

The ideal candidate will have hands-on experience with DoD cybersecurity environments, host-based security tools, vulnerability management platforms, SIEM technologies, firewalls, intrusion detection/prevention systems, and incident response.

Key Responsibilities

• Implement, operate, and monitor cybersecurity controls protecting government information systems, networks, servers, and workstations.

• Ensure systems and personnel comply with established DoD, Marine Corps, and government cybersecurity policies, standards, and requirements.

• Develop, implement, and maintain government-approved cybersecurity policies, security plans, procedures, and operating documentation.

• Monitor enterprise networks for suspicious or malicious activity using intrusion detection, intrusion prevention, SIEM, vulnerability management, and security monitoring platforms.

• Identify, investigate, document, and respond to cybersecurity incidents, vulnerabilities, and potential system compromises.

• Perform cybersecurity incident handling, forensic analysis, remediation, containment, and recovery activities.

• Maintain workstation and server compliance with Marine Corps Host Based Security System (HBSS) requirements.

• Operate and monitor HBSS/McAfee security technologies, firewalls, IDS/IPS platforms, VPNs, and other point-of-presence security tools.

• Use automated cybersecurity platforms such as Tenable SecurityCenter, RedSeal, McAfee SIEM, HBSS, and related tools to identify vulnerabilities, incidents, configuration issues, and security threats.

• Operate and support Imperva Web Application Firewall (WAF) and Database Firewall technologies.

• Conduct vulnerability assessments and assist with remediation of identified cybersecurity risks.

• Support security certification and authorization activities for information systems and networks.

• Assist with Continuity of Operations and Disaster Recovery (COOP/DR) planning, testing, and execution.

• Support Public Key Infrastructure (PKI), certificate management, authentication, and encryption requirements.

• Operate and maintain Electronic Key Management System (EKMS) capabilities as required.

• Support secure network communications, access controls, authentication mechanisms, and data protection requirements.

• Collect, maintain, and report defensive cyber operations metrics, incident statistics, vulnerabilities, remediation activities, and cybersecurity trends.

• Provide cybersecurity guidance and technical recommendations to system administrators, network engineers, leadership, and other personnel.

• Maintain accurate documentation of cybersecurity incidents, investigations, corrective actions, system configurations, and compliance activities.

Technical Environment

Candidates may work with technologies including:

Cybersecurity / Endpoint Security

• McAfee Host Based Security System (HBSS)

• McAfee ePolicy Orchestrator (ePO)

• McAfee SIEM

• Endpoint security and host-based monitoring tools
  

Vulnerability & Network Security

• Tenable SecurityCenter

• RedSeal

• Intrusion Detection Systems (IDS)

• Intrusion Prevention Systems (IPS)

• Enterprise firewalls

• Virtual Private Networks (VPNs)
  

Application & Database Security

• Imperva Web Application Firewall

• Imperva Database Firewall

Identity & Cryptographic Security

• Public Key Infrastructure (PKI)

• Electronic Key Management System (EKMS)

• Certificate and encryption technologies

Core Areas of Responsibility

This role primarily supports:

• Defensive Cyber Operations

• Cybersecurity Incident Response

• Vulnerability Management

• Security Monitoring and Detection

• Network Security

• Endpoint Security

• System Compliance

• Cybersecurity Forensics

• PKI and Encryption

• COOP / Disaster Recovery

• Security Certification and Authorization

• DoD / Marine Corps Cybersecurity Compliance

Required:
Sec+ (Day 1)
DOD Secret or TS

Kaztronix is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, sex, age, religion, disability, veteran status or any other consideration made unlawful by federal, state or local laws. In addition, all human resource actions in such areas as compensation, employee benefits, transfers, layoffs, training and development are to be administered objectively, without regard to race, color, religion, age, sex, national origin, disability, veteran status or any other consideration made unlawful by federal, state or local laws.

JOB SUMMARY:

• Our client is looking for Senior Cybersecurity Specialist having Active TS/SCI clearance to work on an open architecture airborne node that stitches warfighter data into the DAF Battle Network (DAF BNET).
• As Senior Cyber Security Specialist, you will be the program's authority on securing Nomad hardware, Smith software, and Watch operations throughout Major Release. Your zero trust designs, continuous ATO tooling, and cross domain safeguards will decide when PG can fly and fight in contested environments.

ESSENTIAL JOB FUNCTIONS:
Cyber Strategy & Governance:

• Own the PG Cybersecurity Strategy, System Security Plan (SSP), and Plan of Action & Milestones (POA&M).
• Align all efforts with NIST 800 53, CNSSI 1253, and Air Force Zero Trust Reference Architecture.
  Chair cyber risk boards; brief metrics & burn downs to SES/GO stakeholders.

RMF & Continuous ATO:

• Lead the PG Risk Management Framework (RMF) process from categorization through authorization; shepherd artifacts in eMass.
  Stand up automated compliance scans (ACAS, SCAP, Nessus, Tanium) integrated with the DevSecOps pipeline; deliver continuous ATO dashboards.

Secure DevSecOps & Supply Chain Risk:

• Embed S BOM analysis, container hardening, and code signing into Smith's 90 day software release cadence.
  Evaluate third party components for supply chain threats; drive mitigations and waivers.

Cross Domain & Crypto Engineering:

• Develop guard rulesets and data flow enforcement for Multi Level Security (MLS) cross domain solutions .
  Coordinate Type 1 crypto key management plans with NSA; author KOV 11 / SKL handling procedures.

Vulnerability Management & Incident Response:

• Conduct penetration tests and red team exercises on Integration SIL builds; track findings to closure.
  Draft and rehearse PG specific incident response/hunt forward playbooks for Watch operations.

Platform & Flight Test Support:

• Generate "cyber annexes for AF Form 1067s, Safety of Flight packages, and Interim Authorizations to Test (IATT).
• Deploy secure configs on flight hardware; provide on site cyber assurance during ground & flight events.
• Mentorship & Culture
• Coach engineers on secure by design principles, STIG implementation, and zero trust concepts.
  Foster a DevSecOps, fail fast mindset inside classified environments.

Required Skills:

• Active TS/SCI clearance.
• B.S. in Cybersecurity, Computer Science, Information Systems, or related field and 15+ years securing DoD or IC C4ISR/avionics systems; at least 5 years as the lead cybersecurity engineer or ISSM or a Masters plus 12 years of experience.
• Hands on mastery of RMF, NIST 800 53, DISA STIGs, SCAP/ACAS, and eMass workflows.
• Experience designing or accrediting cross domain solutions and Type 1 crypto architectures.
• Working knowledge of container security, IaC ( Ansible/Terraform), and DevSecOps pipelines (Platform One, Iron Bank).

Desired Skills:

• DoD 8570/8140 IAM /IASAE Level III certification ( CISSP ISSEP, CISM, GSLC , etc.).
• Prior involvement in ABMS , CJADC2, OMS/UCI, or tactical data link programs.
• Familiarity with zero trust enforcement for SATCOM, SDR, and software defined networking environments.
• Red team/pen-test credentials (OSCP, GXPN, CEH) and experience authoring mitigations.
• Agile/Scrum or SAFe certification.

A large Engineering customer of Marathon TS is seeking an experienced Cyber Security Specialist to join their dynamic team.

Position Responsibilities:

• Conduct ICS/SCADA system inventories following guidance including, but not limited to U.S. Army ICS Inventory Methodology and Unified Facilities Criteria (UFC) 4-010-06, Cybersecurity of Facility-Related Control Systems.
• Assist in the development and verification of documentation necessary to complete the DoD RMF assessment and authorization process.
• Implement Implementation of DoD Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems.
• Conduct vulnerability scanning and document system vulnerabilities.
• Work in a team environment alongside other cybersecurity engineers and Risk Management Framework (RMF) analysts.

Additional Preferred Qualifications:
· 5+ years of experience working with industry and government agencies on the design of ICS platforms and integrated ICS systems
· Strongly preferred: Meet the Department of Defense Directive (DoDD) 8570.01 "Information Assurance Training, Certification, and Workforce Management” and DoD 8570-M "Information Assurance Workforce Improvement Program” requirements for IAM (Information Assurance Manager) Level 3, IAT (Information Assurance Technical) Level 3, OR IASAE (Information Assurance System Architect and Engineer) Level 3
· Familiarity with various industry ICS products
· Experience implementing a variety of security assessment tools
· Implementation of DoD Security Technical Implementation Guides (STIGs)
· Security Readiness Review (SRR) Tools (scripts and OVAL Benchmarks, ACAS, Wireshark)
· Excellent understanding of the DoD RMF lifecycle and NIST 800-53 controls implementation
· Strong written and verbal communication skills Ability to coordinate with and support multiple team members, vendors, and government customers
· Ability to identify, maintain, and troubleshoot HMI components
· Ability to identify, maintain, and troubleshoot control network components
· Ability to interpret drawings both mechanical and electrical
· Ability to identify, maintain, and utilize SCADA systems and KPI's
· Ability to train others with lesser skills
· Ability to access all levels and areas of the facility
· Working knowledge of EMS/SCADA or other operational control systems.
· Knowledge of SCADA protocols like Modbus, IEC (phone number removed)-101 or 104, IEC 61850 and DNP3 and other major SCADA protocols

#CJJOBS

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status ").