Cybersecurity Lead / SME

Duration: long-term
Active Certification: CISM, CISSP, or CCISO
Clearance: Active Top Secret Clearance or above

Job Summary :

• We are seeking a Cybersecurity Lead to lead a team in delivering cybersecurity activities and functions that direct the security, operations, engineering, and defense of NEIS infrastructure, consistent with regulations, policies, memorandums, and directives to reduce attack surface, improve cyber detection/response, and evolve the overall cybersecurity posture against emerging threats.

• Lead a team in implementing, operating, and maintaining a Layer 7 inspection at the firewalls IAW DISA "Zero Trust " guidance, OMB M-22-09, Continuous Monitoring program IAW NIST SP 800-137, and a SIEM capability IAW OMB M-21-31.
• Responsible for maintenance of cybersecurity for the NDU enterprise network in accordance with Federal Information Security Management Act (FISMA); National Institute of Standards and Technology (NIST); other Federal, DoD, and Chairman of the Joint Chiefs of Staff (CJCS) requirements; and industry best practices.
• Cyber Network Defense (CND): Responsible for monitoring, analyzing, and responding to data and information security needs of NDU. The Contractor will operate in a digital or networked environment with tasks or responsibilities that fall outside simple tool usage. Alerts that have been identified as critical shall be addressed 24x7x365.
• Cyber Incident Response: Provide for the immediate response and resolution of any reported incidents.
• Develop Cyber Incident After Action Reports after each incident.
• Continuous Integrated Security Support: Provide continuous integrated support for the day-to-day security compliance activities supporting NDU's Continuous Monitoring program.
• Provide continuous integrated support for the day-to-day security compliance activities supporting NDU's Continuous Monitoring program.
• Account Artifact Management and Tracking. Maintain Cyber database for all NDU Enterprise authorized users.
• Cyber and Accreditation Risk Management Framework (RMF) Support
  Deliver a Cybersecurity Status Report that addresses areas such as scanning and patching, Plan of Action and Milestones (POA&M), ongoing certification and accreditation (C&A) activities, and reported incidents/mitigations.
• Deliver Cybersecurity Executive Briefings that address the status of NDU's Cybersecurity posture and provide an executive-level overview of the topics outlined within the Cybersecurity Status Report.
• 2.3.1.7. Cybersecurity Tool Management: ePolicy Orchestrator (ePO), CMRS ESS, ACAS Security Center, SIEM