Information Systems Security Manager

Location: Lexington Park, MD

Work Location: onsite

• You have 8+ years of combined experience working in defensive/offensive cybersecurity, information assurance, penetration testing, or related fields.
• You have knowledge of the Department of Navy and Naval Air Systems Command (NAVAIR), including digital infrastructure/environments, DevSecOps, Continuous Integration/Continuous Development (CI/CD), and continuous Authority to Operate (cATO).
• You have proven experience in designing, implementing, and maintaining multi-level security architectures across cloud, infrastructure, and platform applications.
• You have strong technical expertise in identifying and developing cyberspace operations requirements, processes, and security controls.
• You have experience designing and operating enterprise security controls and conducting incident response.
• You have analytical skills to assess capability development requirements, system architectures, and emerging cybersecurity technologies.
• You have excellent written and verbal communication skills, including the ability to articulate complex issues to both technical and non-technical stakeholders.
• You have the ability to work independently and in a fast-paced team environment with changing priorities.
• You have the ability and motivation to learn new skills in an evolving information security landscape.
• You are willing to travel up to 20% as required.

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or a related technical discipline. Certificates in cybersecurity, specific systems, or tools may be accepted in lieu of a degree on a case-by-case basis.
• Active Secret clearance required, with the ability to obtain Top Secret/SCI eligibility.
• Working knowledge of Windows and Linux operating systems.

• Proficiency in using security tools such as Splunk, ArcSight, Microsoft Sentinel, FortiSIEM, SwimLane, QRadar, and LogPoint for monitoring, assessing, and reporting system security vulnerabilities.
• Hands-on experience with security monitoring, log analysis, threat intelligence, and digital forensics to identify and respond to system anomalies.
• Experience with defending against known attack vectors.