Essential Job Duties:
System Development & Compliance
- Plan and execute the deployment of unclassified information systems in alignment with U.S. Government regulations, including NIST 800-53, DFARS 252.204-7012, 252.204-7009, 52.204-21, and related standards.
- Conduct gap analyses on emerging systems and technologies at Point Blank Enterprises, develop remediation plans, and drive closure of identified compliance gaps.
Cybersecurity Standards & Certification
- Lead the development and implementation of cybersecurity standards and best practices to achieve and maintain Cybersecurity Maturity Model Certification (CMMC) compliance.
Classified Environment Authorization
- Oversee the Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization processes under the NIST Risk Management Framework (RMF) for classified systems.
Policy & Documentation
- Develop, maintain, and enforce IT security policies, procedures, and standards to support cybersecurity objectives.
Governance & Compliance
- Ensure all IT security operations comply with corporate security policies, legal requirements, and regulatory obligations.
Project Security Integration
- Provide strategic guidance to IT projects and initiatives to embed appropriate security controls into new solutions.
Security Program Support
- Collaborate with the Facility Security Officer to ensure alignment with cybersecurity-related regulatory requirements.
Monitoring & Threat Detection
- Conduct regular security audits and monitoring to detect threats, including potential insider threat indicators.
Incident Response
- Participate in technical incident response and forensic investigations as needed.
Stakeholder Engagement
- Interface with U.S. Government agencies, customers, auditors, and third-party service providers to support cybersecurity initiatives.
Infrastructure Oversight
- Design and manage the development of security management infrastructure.
Reporting & Communication
- Provide regular and ad hoc updates to internal stakeholders and executive sponsors on cybersecurity status and timelines.
Training & Awareness
- Coordinate cybersecurity training programs for end users to promote awareness and compliance.
Project Administration
- Perform administrative tasks related to cybersecurity project implementation, support, and maintenance.
Firewall & Network Security
- Support firewall configuration and ensure alignment with company security requirements.
IT Collaboration
- Partner with IT teams to develop secure solutions for operational and project-based needs.
Data Center Maintenance
- Maintain environmental monitoring systems within the data center.
Process Improvement
- Identify opportunities for internal process enhancements and recommend actionable solutions.
Continuous Improvement
- Drive improvements across all areas of IT responsibility to enhance security posture and operational efficiency.
Safety & Quality Compliance
- Adhere to company safety and quality standards in all work activities.
Workplace Standards
- Maintain a clean, safe, and organized work environment.
Additional Duties
- Perform other related tasks assigned to support the company’s cybersecurity mission.
Education & Experience:
- Must be eligible to obtain a U.S. Government personnel security clearance.
- Bachelor’s degree in engineering, Information Security, or a related field, with:
- Minimum 7 years of IT experience, including 4 years in Security Management, or
- Master’s degree (MS) in a relevant discipline with at least 5 years of professional experience.
- Minimum 3 years of experience supporting IT-related tasks for Department of Defense (DoD) contracts.
- Familiarity with modern cybersecurity practices and emerging trends, including:
- Threat hunting and modeling
- Digital forensics
- Reverse engineering
- Phishing mitigation
- Penetration testing
- Prior experience working with U.S. Government or DoD entities preferred.
- Proficiency with cloud-hosted services, web-based applications, and server/service management.
- Strong ability to communicate complex technical concepts across various levels of management.
- Preferred Certification: IAM Level II or IAT Level III, in accordance with DoDI 8570.01-M (Information Assurance Workforce Improvement Program).
Required Qualifications:
- Legal Requirement: Must be a U.S. person (U.S. citizen or lawful permanent resident) to comply with federal contracting regulations. Must be a US person as defined by ITAR.
- Language Proficiency: All candidates must be fluent in English, with the ability to speak, read, and write at a professional level.
Physical Demands & Working Conditions:
- Up to 10% travel required.
- Prolonged periods of sitting and computer use.
- Manual dexterity and coordination required for handling documents and office materials.
- Occasional lifting of items up to 25 lbs.
- Minimal reaching above and below desk level.
- Frequent movement within the facility to complete tasks.
- Visual acuity and physical coordination are necessary for extended use of keyboard and video display terminals.
- Must be available for on-call support during non-business hours for IT emergencies.