Qureos Mentor

cFocus Software Incorporated

<div>cFocus Software seeks a Program Manager to join our program supporting the Department of Defense (DoD). This position is remote. This position requires the ability to obtain a TS/SCI clearance. 
 
Qualifications:<ul><li>
Project Management Professional certification OR minimum 5 years-experience managing projects in the</li><li>
field of DoD cybersecurity or Navy OT&amp;E programs</li><li>
Minimum 3 years of experience in financial analysis and management</li><li>
Minimum 3 years of proficiency in Microsoft (MS) office products</li><li>
Minimum 3 years of experience briefing senior leadership</li><li>
Experience managing a workforce of 25+ people</li></ul> 

Duties: 
<ul><li>
Provide administrative support for centralized preparation of all contract related deliverables.</li><li>
Provide financial management support for centralized tracking, analysis and reporting all contract related funding, costs, travel and expenditures required the execution of this contract.</li><li>
Preparation of monthly status/progress report for contract tasks.</li><li>
Preparation of monthly contract financial reports.</li><li>
Preparation of technical reports as required by specific projects.</li><li>
Provide contract tracking deliverables to the OPTEVFOR COR and Technical Point of Contact (TPOC) monthly.</li><li>
Ensure all tasks for each labor category under this contract are being accomplished and that the proper support is being given.</li><li>
Ensure all TTPs/SOPs and exceptions are properly maintained.</li><li>
Provide additional tasking as needed.</li></ul> 

0pnWcTLHO6</div>

Navy OT&E - Program Manager - TS/SCI Required

<div>cFocus Software seeks a System Administrator to join our program supporting the Department of Defense (DoD). This position is remote. This position requires the ability to obtain a TS/SCI clearance. 
 
Qualifications:<ul><li>
Minimum 5 years&rsquo; experience managing Windows and Active Directory environments, encompassing tasks such as installation, configuration, maintenance, and support of computer systems and servers.</li></ul> 

Duties: 
<ul><li>
Maintain the physical and logical security of all network infrastructure and protect the integrity of the residing data.</li><li>
Manage the functionality and proficiency of multiple computers running on one or more operating system platforms.</li><li>
Manage backup and recovery solutions and procedures in accordance with applicable DoD/DON policies and guidance.</li><li>
Support development of standard operating procedures related to the use of computing resources.</li><li>
Implement STIGs, patches and updates for operating systems and applications on a regular basis and upgrade administrative tools and utilities.</li><li>
Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements and to support IT infrastructure applications or asset management applications.</li><li>
Develop and maintain the master image for the cyber OT&amp;E toolset in accordance with customer requirements; clone master image and validate toolset build per operational requirements in a timely manner.</li><li>
Research and recommend innovative, and where possible automated approaches for system administration tasks.</li><li>
Perform backup operations and system monitoring, verifying the integrity and availability of all hardware, network and server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.</li><li>
Perform regular security monitoring to identify any possible intrusions, perform regular file archival and purge as necessary and create, change, and delete user accounts as required.</li><li>
Configure / add new services as necessary and upgrade and configure system software that supports IT infrastructure applications or asset management applications per project or operational needs.</li><li>
Review ACAS/Tenable security scan results and remediate vulnerabilities as required.</li><li>
Maintain network/system security posture.</li><li>
Support ongoing Cyber OT&amp;E infrastructure status and systems administration activities ISO current and future operations, providing updates as needed to inform mission readiness and planning.</li></ul>
0fqU08MEKe</div>

Navy - System Administrator - TS/SCI Required

<div>cFocus Software seeks an RMF Analyst to join our program supporting the Department of Defense (DoD). This position is remote. This position requires the ability to obtain a TS/SCI clearance. 
 
Qualifications:
<ul><li>Minimum 5 years&rsquo; experience designing and integrating enterprise and systems security throughout the development lifecycle.</li><li>
Minimum 3 years&rsquo; experience conducting thorough assessments of RMF-related management, operational, and technical security controls within DOD IT systems.</li><li>
Minimum 3 years&rsquo; experience providing project management, subject matter expertise, and hands-on experience for systems certification and accreditation efforts in accordance with applicable DOD and DON cybersecurity policies and RMF guidance.</li></ul> 

Duties: 
<ul><li>
Create, review, update, and validate cybersecurity Standard Operations Procedures (SOPs) as required.</li><li>
Review and maintain an inventory of authorized software (software custodian).</li><li>
Review and maintain an inventory of government furnished devices and media.</li><li>
Ensure configurations on laptops and servers are validated prior to being deployed (as required)</li><li>
Audit and validate configurations of network devices based on STIGs, or defining and implementing compensating controls of such STIGs as required to ensure mission execution.</li><li>
Maintain and update all RMF and A&amp;A documentation to ensure relevancy and alignment with OPTEVFOR cyber OT&amp;E mission assets to include required revisions and updates in eMASS.</li><li>
Conduct comprehensive annual RMF package reviews to ensure continued compliance of the cyber OT&amp;E mission toolset, networks, and/or systems.</li><li>
Ensure traceability is maintained throughout the RMF submission process (e.g., A&amp;A plan, Plan Of Action and Milestones (POA&amp;M), Security Assessment Report (SAR), topology, software, ports protocols and services, test plan).</li><li>
Maintain network and system documentation in DoD Information Technology Portfolio Repository-DON /DADMS.</li><li>
Maintain documentation and registration of network ports, protocols, and services.</li><li>
Maintain circuit registrations in Global Interconnection Approval Process System (GIAP) and Systems/Network Approval Process (SNAP).</li><li>
Maintain and report on the status (weekly) of all outstanding A&amp;A items and supporting documentation.</li><li>
As a member of the Configuration Control Board (CCB), ensure CCB approved changes are timely and accurately reflected in the A&amp;A documentation.</li><li>
Support compliance validation of current and future directives (e.g.: IAVs, STIGs, TASKORD/CTOs).</li><li>
Provide recommendations for corrective action of any non-compliant security controls.</li><li>
Execute DISA STIG validations for systems in conjunction with RMF/A&amp;A package reviews annually in accordance with eh DoD Instruction 8510 series, Risk Management Framework for DoD systems.</li><li>
Provide security expertise to ensure security controls are implemented and the resulting documentation and artifacts are current.</li><li>
Prepare and maintain documentation, vulnerability scan results, system security assessments, and configuration management findings to support RMF compliance and inform system authorization decisions.</li><li>
Document assessment activities and results in sufficient detail to enable external review of all assessment processes, activities, results, and conclusions.</li><li>
Conduct and document a semi-annual tabletop exercise twice in a calendar year.</li><li>
Develop or contribute to security test plans and supporting documentation that verifies the implementation of assigned security controls and inform ongoing risk determinations.</li><li>
Review and analyze IT contingency / disaster recovery plans for NIST and DoN compliance, and produce checklists for IT systems.</li></ul>
fR3pUMi8wt</div>

Navy - RMF Analyst - TS/SCI Required

<div>cFocus Software seeks a Red Team Operator to join our program supporting the Department of Defense (DoD). This position is remote. This position requires the ability to obtain a TS/SCI clearance. 
 
Qualifications:<ul><li>
Minimum 3 years&rsquo; experience performing any combination of: penetration testing, red teaming, or exploitation development.</li><li>
Minimum 3 years&rsquo; with proficiency in leading red team operators in penetration testing/red teaming to accomplish assigned test objectives.</li></ul> 

Duties: 
<ul><li>
Assist in the development of cyber OT&amp;E test plans, execute cyber tests in support of Navy acquisition systems, and report cyber test results.
</li><li>Conduct cyber tests on a wide range of systems comprised of information technology and operational technology supporting US Navy platforms, weapon systems, information warfare and business systems/services in live operational environments, laboratories, cyber ranges and cloud-based services; system safety and operational security is paramount in all environments.</li><li>
Leverage all authorized resources and analytic techniques to penetrate/access targeted networks and systems under test in support of OPTEVFOR&rsquo;s cyber OT&amp;E mission.
</li><li>Provide expertise in penetration testing and DoD and DoN red team operations.
</li><li>Review cyber test requirements for each system under test and research and coordinate with other DoD organizations, academia, private sector and defense Contractors on cyber capabilities and tools to meet the test requirements.
</li><li>Make recommendations to the Government on the test objectives and capabilities to meet current and future test requirements.
</li><li>Coordinate with OPTEVFOR red team operators and exploitation analysts to implement/integrate the Government determined solutions, including new tools, lab/range use and external resource support.
</li></ul>G25Iz8Bq9R</div>

Navy - Red Team Operator - TS/SCI Required

<div>cFocus Software seeks an Advanced Red Team Operator to join our program supporting the Department of Defense (DoD). This position is remote. This position requires the ability to obtain a TS/SCI clearance. 
 
Qualifications:<ul><li>
Minimum 6 years&rsquo; experience performing any combination of: penetration testing, red teaming, or exploitation development.</li><li>
Minimum 6 years&rsquo; with proficiency in leading red team operators in penetration testing/red teaming to</li><li>
accomplish assigned test objectives.</li></ul> 

Duties: 
<ul><li>
Review and become proficient in OPTEVFOR cyber T&amp;E concept of operations, SOPs, policies and guidance.</li><li>
Maintain and participate in the development of 01D SOPs and documentation for DCAT authorization established in DoDI 8585.01.</li><li>
Research, review, prioritize, and submit operational requirements for acquisition of equipment or cyber capabilities, following the 01D tool approval process.</li><li>
Support development and execution of TTPs for penetration testing or Red Teaming.</li><li>
Research adversary cyber actors&rsquo; TTPs, organizational structures, capabilities, personas, and environments, and integrate findings into cyber survivability test planning and execution.</li><li>
Conduct open-source research and system under test documentation review to familiarize with the system&rsquo;s mission, architecture and interfaces including critical components to identify its attack surface and threat vectors</li><li>
Participate in checkpoint meetings</li><li>
Guide development of test plan objectives</li><li>
Review test plans, ensuring that test plans objectives are feasible</li><li>
Participate in test planning site visits</li><li>
Participate in site pre-test coordination visits. Support in-brief to the test site.</li><li>
Lead red team test plan review</li><li>
Add relevant system technical information to test reference library</li><li>
Organize and lead research presentations for advanced capability development in support of future tests</li><li>
Prepare OPTEV-RT test assets (Government Furnished)</li><li>
Execute test events, including Cooperative Vulnerability Penetration Assessments, Adversarial Assessments, and Cyber Tabletops, in support of Operational Testing, Developmental Testing, risk reduction events, or other events, as assigned.</li><li>
Use OPTEVFOR provided and NAO approved commercial and open-source network cyber assessment tools (e.g. Core Impact, Nmap, Burp, Metasploit, and Nessus).</li><li>
Employee ethical hacking expertise to exploit discovered vulnerabilities and misconfigurations associated with but not limited to operating systems (Windows, Linux, etc.), protocols (HTTP, FTP, etc.), and network security services (PKI, HTTPS, etc.) to accomplish test objectives</li><li>
Be able to accomplish testing independently and provide direction to basic and intermediate operators</li><li>
Ensure tests are conducted safely, in accordance with the test plan, and OPTEVFOR policies are adhered to.</li><li>
Follow Joint Forces Headquarters (JFHQ)-DODIN deconfliction procedures</li><li>
Verify collected data for accuracy and completeness.</li><li>
Participate in the post-test iterative process, including generation of documents (e.g. deficiency/risk sheets)</li><li>
Document lessons learned.</li><li>
Participate in capture the flag events, cyber off sites, external engagements such as red team huddles and red team technical exchange meetings; develop required products and materials in support of these events.</li><li>
Attend OPTEVFOR required meetings in support of OT&amp;E.</li><li>
Generate and update documentation to maintain DCAT authorization compliance per DoDI 8585.0.</li></ul>
eJETZwYyH3</div>

Navy - Advanced Red Team Operator - TS/SCI Required

<div>cFocus Software seeks a Network Engineer to join our program supporting the Department of Defense (DoD). This position is remote. This position requires the ability to obtain a TS/SCI clearance. 
 
Qualifications:<ul><li>
A BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science, from an Accreditation Board for Engineering and Technology (ABET) accredited or Certified Association Executive (CAE) designated institution OR minimum of 5 years&rsquo; experience with technical proficiency in network infrastructure and security design and configuration of routers, switches, firewalls, and load balancers.</li><li>
Minimum of 3 years&rsquo; experience in RMF security testing.</li><li>
Proficiency with automation tools to include but not limited to Python, Perl, or shell scripting languages.</li></ul> 

Duties: 
<ul><li>
Provide network engineering and administration of multi classification networks in support of OPTEVFOR Cyber OT&amp;E mission.</li><li>
Establish virtual environments tailored to support scheduled cyber OT&amp;E events in timely manner
</li><li>Test and validate virtual environment prior to test execution and provide troubleshooting support during test execution.</li><li>
As required, package, maintain, and deploy the cyber OT&amp;E toolset and flyaway kits in support of OPTEVFOR&rsquo;s mission</li><li>
Administer and maintain the cyber test infrastructure, including installing patches, hardening systems, reviewing system logs, monitoring system activity, maintaining physical security of all associated hardware, and disabling unnecessary service.</li><li>
Design, implement, and administer enclaves supporting penetration test team with implementation of computer network security, military system specifications, and DoD cybersecurity in accordance with Information Assurance Vulnerability (i.e. IAVA, IAVB) notices, STIG, Tasking Orders, Warning Orders, Fragmentary Orders, and security architecture policies.</li><li>
Apply virtual hosting and server technology into network architectures.</li><li>
Configure network infrastructure to support test team user environments used for testing as well as on keyboard training evolutions.</li><li>
Support the planning/engineering and acquisition of hardware and software.</li><li>
Brief government 01D leadership weekly.</li></ul> 

zdyRby5DHl</div>

Navy - Network Engineer - TS/SCI Required

<div>cFocus Software seeks a Basic Red Team Operator to join our program supporting the Department of Defense (DoD). This position is remote. This position requires the ability to obtain a TS/SCI clearance. 
 
Qualifications:<ul><li>
Certified Ethical Hacker (CEH), equivalent, or higher certification.</li><li>
Minimum 1 year of experience performing any combination of penetration testing, red teaming, or exploitation development.</li><li>
Proficient in at least two operating systems, to include Windows, Linux, or Unix variants.</li><li>
Proficient in at least one of the following offensive tools: Metasploit, Cobalt Strike, Core Impact</li><li>
Independently operate to conduct penetration testing/red teaming under the guidance of a senior or mid red team operator to accomplish assigned test objectives.</li><li>
Independently generate red team report documents.</li></ul> 

Duties: 
<ul><li>
Review and become proficient in OPTEVFOR Cyber T&amp;E concept of operations, SOPs, policies and guidance</li><li>
Research and submit operational requirements for acquisition of equipment or cyber capabilities, following the 01D tool approval process.</li><li>
Support development and execution of TTPs for penetration testing or red teaming</li><li>
Participate in OPTEVFOR cyber test planning</li><li>
Conduct open-source research and system under test documentation review to familiarize with the system&rsquo;s mission, architecture and interfaces including critical components to identify its attack surface and threat vectors</li><li>
Participate in check point meetings</li><li>
Guide development of test plan objectives</li><li>
Review test plans, ensuring that test plans objectives are feasible</li><li>
Participate in test planning site visits</li><li>
Participate in site pre-test coordination visits. Provide an in brief to the test site.</li><li>
Review test plans</li><li>
Add relevant information to test library</li><li>
Conduct research on SUTs and present findings to the red team prior to test</li><li>
Prepare OPTEV-RT test assets</li><li>
Execute test events, including Cooperative Vulnerability Penetration Assessments, Adversarial assessments, and Cyber Tabletops, in support of Operational Testing, Developmental Testing, risk reduction events, or other events, as assigned.</li><li>
Use OPTEVFOR provided and NAO approved commercial and open-source network cyber assessment tools (e.g. Core Impact, Nmap, Burp, Metasploit, and Nessus).</li><li>
Employee ethical hacking expertise to exploit discovered vulnerabilities and misconfigurations associated with but not limited to operating systems (Windows, Linux, etc.), protocols (HTTP, FTP, etc.), and network security services (PKI, HTTPS, etc) to accomplish test objectives</li><li>
Be able to accomplish tasking independently with direction provided by an intermediate or advanced operator</li><li>
Ensure test are conducted safely, in accordance with the test plan, and OPTEVFOR policies are adhered to.</li><li>
Follow JFHQ-DODIN deconfliction procedures</li><li>
Verify collected data for accuracy and completeness.</li><li>
Participate in the post-test iterative process, including generation of documents (e.g. deficiency/risk sheets)</li><li>
Document lessons learned.</li><li>
Participate in capture the flag events, cyber off sites, external engagements such as red team huddles and red team technical exchange meetings; develop required products and materials in support of these events</li><li>
Attend OPTEVFOR required meetings in support of OT&amp;E.</li></ul>
k0lfNVtR95</div>

Navy - Basic Red Team Operator - TS/SCI Required

Join cFocus Software Incorporated and explore 10   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.