RISK MITIGATION CONSULTING Hiring for Cybersecurity SME Job at Albany, GA Full Time

RMC: Assuring Tomorrow

Do you want to be part of a team of highly skilled professionals performing challenging and rewarding work? Consider a career with Risk Mitigation Consulting (RMC)! RMC is a purpose-driven company on a relentless mission to deliver impact and service to our customers in the federal and commercial markets. We are about improving security for military and global commercial partners through our Risk Management, Mission Assurance, Cybersecurity, and other technical services. Our talented team is our top priority, which is reflected in our flexible work environment and highly rated culture.

Come join our team and be a part of our mission of Assuring Tomorrow!

RMC offers:

• Health, vision, and dental insurance for the employee is paid in full by RMC and dependent health care is subsidized by RMC.
• This position participates in the Annual Bonus Program
• Travel: CONUS & OCONUS 5%

Risk Mitigation Consulting (RMC) is seeking a Cybersecurity SME in Albany, GA.

The Cybersecurity SME will support our military customer at the Marine Corps Logistics Base, Albany, Georgia. Responsibilities encompass the administration and security of ICS servers, applications, networking, field devices such as programmable logic controllers (PLC) and Java Application Control Engine (JACE) devices, and end user desktops.

Security

• Evaluate and test the security of Industrial Control Systems (ICS) to ensure that the systems and data confidentiality, integrity, and availability of the organization and facilities are being maintained and are up to date.
• Design and implement secure network architectures, virtualization technologies.
• Strong process and procedure ownership experience for system audits.
• Experience and expertise with ethical hacking, firewall and intrusion detection/prevention technologies, secure coding practices and threat modeling.
• Protect ICS data by implementing proper security measures such as firewalls, secure passwords policy, preventing unauthorized personnel from accessing unauthorized ICS applications.
• Create a disaster recovery/business continuity plan.
• Identify current operational as well as emerging ICS cyber security trends/challenges in risk assessment and baseline technical control implementation; collaborate with base engineers and program analyst on new tools and platforms to address identified challenges.
• Perform detailed and technical analysis of ICS, help integrate cyber security solutions in a testing environment, develop test cases and document research and test results.
• Monitor and investigate security and privacy incidents and breaches.
• Produce management level and executive level reports for current R&D projects.
• Assist and advise Project Analyst in obtaining MCEN (Marine Corps Enterprise Network) ATO (Authority to Operate) for MCLB Albany SmartGrid project.

Server Administration

• Design, document, build, maintain and secure server infrastructure.
• Working knowledge of Server 2008 and Server 2012, and Server 2016.
• Working knowledge of VMWare virtual technologies.
• Maintain the server backup plan and recovery plan. Knowledge of Symantec BackUp Exec preferable.
• Working knowledge of TCP/IP, DHCP, DNS, SNMP, RDP, HTTPS protocols.
• Operating system security and bug patching.
• Server application security and bug patching.
• Perform antivirus and malware scanning and maintenance. Comply with and configure ICS assets in cooperation with USMC ACAS scan results.
• Establish server performance baselines, track and monitor server activity.
• Server and hardware lifecycle maintenance:
  • Install
  • Upgrade
  • Replace

ICS Application Support

• Troubleshoot and resolve application issues. Knowledge of Niagara AX/N4, ION Enterprise, Power Monitoring Expert, and Wonderware ICS applications helpful.
• Coordinate vendor support when warranted.
• Develop/participate in developing the validation and testing methodology for the proper verification of functionality for tools and platforms developed.

Desktop Support

• Troubleshoot and resolve end user issues when accessing ICS IT systems.
• Provide general IT support for Public Works I&E personnel:
  • Microsoft Office
  • Oracle Java
  • Internet Explorer
  • Windows 7 and Windows 10 Operating Systems

ICS IT Field Device Support

• Direct Digital Control (DDC) controllers, Power Logic Controller (PLC), and Java Application Control Engine (JACE) device connectivity issues.
• Troubleshoot, repair, and replace Advanced Metering Infrastructure (AMI) radios, switches intrusion detection systems, and routers.

Network Support

• Coordinate with base telecom to identify and rectify network device issues (firewall, router, switches, fiber converters, fiber switches, cat 6 runs).
• Document the design of the ICS network.
• Ensure network device configurations are backed up and stored securely.
• Troubleshoot and resolve wired and wireless network performance and connectivity issues

SKILLS/QUALIFICATIONS

• Must have excellent writing skills, strong communication abilities, good time management, computer, internet, and organizational skills.
• Work confidently in a fast-paced environment with the ability to independently support multiple projects.
• Possess an in-depth knowledge of concepts, best practices and controls in a breadth of information security areas/domains; such as governance and risk management, access control, cryptography, physical security, security architecture and design, business continuity/disaster recovery planning, network security, application and operations security and compliance/incident management.
• Technical and IT audit background with practical knowledge of a wide variety of technologies, including control systems, infrastructure and operating systems, network and web infrastructures, database architecture and intrusion detection/prevention systems.
• Experience planning, designing, installing, monitoring, maintaining, and supporting networks, primarily in a military environment.
• Ability to work in a team environment and take initiative to help ensure team tasks are successfully completed within required timelines.
• Strong ability to interact and communicate both written and verbally with people at all levels, both technical and non-technical.
• Possess strong problem solving skills.
• Possess knowledge in one or more of the following:
  • DoD or NIST Risk Management Framework (RMF), NIST SP 800-53 rev4
  • CNSSI 12553
  • NERC CIP
  • ISA/IEC 62443
  • DHS ICS-CERT Cybersecurity recommendations and best practices
  • SANS ICS Cybersecurity best practices
  • Other cybersecurity and or ICS standards, regulations, guidelines and best practices

Required Certifications: Security+

Desired Certifications: CISSP

Security Clearance: Active Secret

Additional Requirements:

Compliance with a drug-free work environment, U. S. Citizen, possess valid State driver’s license, a current US passport with 8 months remaining until the expiration date.

RMC is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected factor.