Information Assurance Admin II
General Atomics
General Atomics (GA), and its affiliated companies, is one of the world’s leading resources for high-technology systems development ranging from the nuclear fuel cycle to remotely piloted aircraft, airborne sensors, and advanced electric, electronic, wireless and laser technologies.We have an exciting opportunity for an Information Systems Security Officer (ISSO) to join our Classified Systems team in Herndon, VA.
With general supervision, this position is responsible for participating in monitoring, evaluating and administering system compliance with information technology (IT) security requirements to ensure company, regulatory and customer requirements are met.
DUTIES AND RESPONSIBILITIES:
- Conducts ongoing vulnerability assessments and security audits to identify cybersecurity risks in accordance with Department of Defense (DoD), Department of Energy (DOE), and Intelligence Community (IC) standards, regulations, and cybersecurity policies/procedures.
- Drives improvements necessary to mitigate those risks.
- Implement cybersecurity requirements for local area networks (LANs), wide area networks (WANs), routers, firewalls, and related network devices which typically requires experience with Cisco IOS.
- Builds and implements workstations and servers running multiple operating systems such as Windows 11, Windows Server, and RedHat Linux.
- Builds and implements virtualization infrastructure using tools such as VMware or HyperV.
- Monitors multiple company information systems for indicators of compromise (IoC) to identify insider threats and potential espionage activity.
- Performs technical analysis of vulnerabilities and leads in the development of vulnerability corrective action plans.
- Conducts a regular review of network, application and operation system security documents and procedures.
- Reviews results of vulnerability assessments and code reviews and informs management of vulnerabilities, risk and mitigation.
- Proven ability to leverage technical expertise in the following:
- Splunk Enterprise, installation and management.
- Nessus Vulnerability Assessment, installation, and management.
- Security Technical Implementation Guide (STIGs) to identify, analyze, and remediate security threats.
- Network and System Administration.
- Windows Backup procedures and management.
- Implementing secure configurations based on NIST (800-53, 800-171) with Continuous Monitoring (CONMON) principles.
- Knowledge of Risk Management Framework (RMF) is a plus.
- Responsible for observing all laws, regulations and other applicable obligations wherever and whenever business is conducted on behalf of the Company. Expected to work in a safe manner in accordance with established operating procedures and practices.
- Performs additional duties as assigned.
- Splunk Enterprise
- Nessus Vulnerability Assessment
- Security Content Automation Protocol (SCAP)
- Security Technical Implementation Guide (STIG) and STIG Viewer
- Network and System Administration
- Active Directory Management
- Windows Backup
- Implemented Splunk Enterprise for real-time security monitoring and incident response, leading to a quantifiable improvement to threat detection and response.
- Utilized Nessus Vulnerability Assessment to identify and prioritize security vulnerabilities within the network infrastructure, resulting in overall security posture.
- Leverage Assured Compliance Assessment Solution (ACAS) to automate security data ingestion and processing, streamlining operations and improving efficiency.
- Ensured system security by adhering to STIGs and utilizing STIG viewer to maintain configuration compliance with industry best practices.
- Supported network and system administration tasks, including user management, access control, and system maintenance.
- Performed regular Windows Backups to ensure data availability in the event of a system failure or security incident.
- Demonstrated understanding of NIST security frameworks (800-53, 800-171, other special publication guides).
- Applying CONMON principles for continuous monitoring and risk mitigation.
We recognize and appreciate the value and contributions of individuals with diverse backgrounds and experiences and welcome all qualified individuals to apply.