Cybersecurity Lead/SME

Job Title: Cybersecurity Lead/SME

Location: Washington, DC 20319

Duration: Full Time

Clearance Required: Top Secret

Certification Required: CISSP or CISM

Job Summary:

• We are seeking a Cybersecurity Lead to lead a team in delivering cybersecurity activities and functions that direct the security, operations, engineering, and defense of NEIS infrastructure, consistent with regulations, policies, memorandums, and directives to reduce attack surface, improve cyber detection/response, and evolve the overall cybersecurity posture against emerging threats.

Role & Responsibilities:

• Lead a team in implementing, operating, and maintaining a Layer 7 inspection at the firewalls IAW DISA "Zero Trust" guidance, OMB M-22-09, Continuous Monitoring program IAW NIST SP 800-137, and a SIEM capability IAW OMB M-21-31.
• Responsible for maintenance for Cybersecurity for the NDU enterprise network in accordance with Federal Information Security Management Act (FISMA); National Institute of Standards and Technology (NIST); other Federal, DoD, Chairman of the Joint Chiefs of Staff (CJCS) requirements; and industry best practices.
• Cyber Network Defense (CND): Responsible for monitoring, analyzing, and responding to data and information security needs of NDU. The Contractor will operate in a digital or networked environment with tasks or responsibilities that fall outside simple tool usage. Alerts that have been identified to be critical shall be addressed 24x7x365.
• Cyber Incident Response: Provide for the immediate response and resolution of any reported incidents.
• Develop Cyber Incident After Action Reports after each incident.
• Continuous Integrated Security Support: Provide continuous integrated support for the day-to-day security compliance activities supporting NDU s Continuous Monitoring program.
• Provide continuous integrated support for the day-to-day security compliance activities supporting NDU s Continuous Monitoring program.
• Account Artifact Management and Tracking. Maintain Cyber database for all NDU Enterprise authorized users.
• Cyber and Accreditation Risk Management Framework (RMF) Support
• Deliver a Cybersecurity Status Report that addresses areas such as scanning and patching, Plan of Action and Milestones (POA&M), ongoing certification and accreditation (C&A) activities and reported incidents/mitigations.
• Deliver Cybersecurity Executive Briefings that address the status of NDU s Cybersecurity posture and provide executive level overview of the topics outlined within the Cybersecurity Status Report.
• 3.1.7. Cybersecurity Tool Management: ePolicy Orchestrator (ePO), CMRS ESS, ACAS Security Center, SIEM
• Accreditation Management; Auditing Support; Access Control and Identity Management (IdM) Services; Certification and Accreditation
• Responsible for network security, patching services and scanning services
• Software Assurance: management and support of software used over the network, verifying that software is free of vulnerabilities either intentionally designed into it or maliciously or accidentally inserted into it during or after development.
• Cloud Security: Provide for the development, implementation, maintenance, and management of NDU s Cloud Security.
• Provides daily supervision and direction to Cyber team.

Required Qualifications:

• BA/BS in a technical discipline with at least 10 years of relevant experience.
• Cybersecurity Service Providers (CSSP) Manager
• Excellent written and verbal communication skills, with a keen attention to detail.
• Ability to work collaboratively in a team environment and build positive relationships with subject matter experts and stakeholders.
• Demonstrated ability to work in a fast-paced, deadline-driven environment.

About our Company: -

22nd Century Technologies, Inc., is one of the fastest growing IT Service Integrator and Workforce Solution companies in the United States. Founded in 1997, 22nd Century Technologies is a Certified National Minority Business Enterprise with 6,000+ people including 600+ Cyber SMEs nationwide supporting our customers in all 50 states, Canada, and Mexico. With HQs in Somerset, NJ and Mclean, VA, 22nd Century has 14 offices throughout the United States. As part of our unrelenting focus on quality and compliance, 22nd Century Technologies delivery is based on Certified Matured Processes including CMMI L3 Dev & SVC, ISO 20000, ISO 27001, and ISO 9001 quality processes. With a strong focus on the public sector, 22nd Century currently holds government contracts with 14 out of 15 Federal Executive agencies including DoD, 37 other Federal agencies, 50 States, 115+ Local agencies, and 37 School Districts. In the last three years, we have expanded our services to Fortune 500 and other commercial clients and currently support 80+ commercial clients.

Recognized among Best Company to Work For by Forbes, 22nd Century Technologies, Inc., consistently exceeds our clients expectations by focusing on their absolute satisfaction with jobs while keeping our employees motivated. 22nd Century Technologies is an Equal Opportunity Employer" and s & all other parties authorized to work in the US are encouraged to apply."

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.