Deputy Cyber Security Service Provider Product Team Lead IRES - HSV

Position Title: Deputy Cyber Security Service Provider Product Team Lead

Location: Redstone Arsenal, Huntsville, AL

Relocation Assistance: None available at this time

Remote/Telework: NO - Not available for this position

Clearance Type: DoD Secret

Shift: Day shift (Mon-Fri)

Travel Required: Up to 10% of the time

#cjpos

Description of Duties:

The Deputy Cyber Security Service Provider Product Team Lead supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The candidate will:

• Supervise the Missile Defense Agency (MDA) Cyber Security Service Provider (CSS P) - Computer Emergency Response Team (CERT).

• Be the senior technical advisor to senior government and contractor leadership for threat and intrusion detection, event/incident response and handling, and cyber forensics activities on the unclassified and classified networks at the Agency level (external/insider threat).

• Provide technical insights and foresight to help develop, implement and maintain MDA's CSSP processes IAW applicable DoD instructions and in coordination with the MDA Chief Information Office (CIO), Joint Force Head Quarters Department of Defense Information Network, and U.S. Cyber Command.

• Coordinate Defensive Cyber Operations actions within the MDA Information Systems and networks. Develops methods, procedures, and policies for preventative and protective cyber measures and collaborates with various internal programs and external agencies.

• Develop methods, procedures and policies for prevention and protection.

• Advise, prepare and present briefings to key staff and leadership on violations of policy/incidents, provides and implements corrective actions, and provides alternative solutions to customers based on unique needs.

• Enforce DoD, USCYBERCOM and MDA standards and policies for classified and unclassified networks.

• Supervise, mentor, and train CSSP-CERT staff to include developing objectives based on capabilities, rating employees, provides technical oversight and instruction, identifies strategic developmental and training needs, and recommends hiring, promotions.

• Perform Charge Account Management (CAM) duties to ensure contract budgetary requirements are met and adhered to throughout the Period of Performance (POP).

• Advise cybersecurity members across the agency on proper cyber-hygiene such as: device hardening (patching, security technical guides (STIGs), group policies, scanning and end-point protections).

The successful candidate will have:

• Skill in troubleshooting and diagnosing cyber defense infrastructure anomalies and work through resolution.

• Knowledge of computer networking concepts and protocols, and network security methodologies.

• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).

• Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.

• Knowledge of cybersecurity principles.

• Knowledge of cyber threats and vulnerabilities.

• Knowledge of specific operational impacts of cybersecurity lapses.

• Knowledge of host/network access control mechanisms (e.g., access control list).

• Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.

• Knowledge of incident response and handling methodologies.

• Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

• Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.

• Knowledge of network traffic analysis (tools, methodologies, processes).

• Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol (TCP), Internet Protocol (IP),

• Open System Interconnection Model (OSI)).

• Knowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities.

• Knowledge of cyber defense policies, procedures, and regulations.

• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth)

Resumes, in month and year format, must be submitted with application in order to be considered for the position. The selected candidate may be assigned as an employee for one of our teammate companies.

Basic Requirements:

Must have one of the following combinations of education and experience: HS Diploma (or GED) and 18 years of general experience; Associate’s degree and 16 years of general experience; Bachelor’s degree and 14 years of general experience; Master’s degree and 12 years of general experience

• Must have 10 years of directly related experience delivering IT and/or Cybersecurity services.

• Must have 3 years of experience working in a management or leadership roles.

• Must have 5 years of experience supporting the MDA.

• Must have an active DoD Secret Security Clearance with the ability to obtain Top Secret

• Must have a current DoD 8570.01-M IAT Level III certification with Continuing Education (CE) - (CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP)

• Must be able to obtain a DoD 8570.01-M CSSP Manager certification with Continuing Education (CE) - (CISM, CISSP, ISSMP, C|CISO) within 6 months of hire.

Desired Requirements:

• Have working knowledge of Missile Defense System.

• Have a strong understanding and extensive background with various DoD communication systems, IT Service Management/Delivery (ITSM/ITSD), System Lifecycle Methodologies, and Cybersecurity protocols.

• Have experience with best-practice business practices, preparing contract proposals, managing large/small organizations, leading engineering/technical teams, interfacing with matrixed managed organizations, using Earned Value Management (EVM) processes/procedures, and managing organizational risk.

• Have experience in a Project Manager or Lead role on a DoD contract.

• Have experience transitioning an enterprise to Cloud technologies (AWS/Azure).

• Have experience with EVM/managing budgets.

• Have a current PMP Certification.

• Have a current ITIL v3 or ITIL4 Certification.

• Have experience in the DoD Risk Management Framework (RMF) processes.

• Have experience in the DoD IA Vulnerability Management (IAVM) processes.

This position is expected to pay $186,000 - $211,000 annually; depending on experience, education, and any certifications that are directly related to the position.

This position will be posted for a minimum of 3 days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.

Our health and welfare benefits are designed to invest in you, and in the things that you care about. Your health. Your well-being. Your security. Your future. Typical benefits offered include flexible work schedules, educational reimbursement, retirement benefits (401K match), employee stock purchase plan, health benefits, tax saving options, disability benefits, life and accident insurance, voluntary benefits, paid time off and paid holidays, and parental leave.