information security specialist

GVI, Inc.

GVI Inc., a subsidiary of Three Saints Bay, LLC, and a Federal Government Contractor industry leader, is seeking an Information Security Specialist in Doral, Florida.Position Responsibilities:<ul><li>The Information Security Specialist performs information security tasks in support of USSOUTHCOM collateral and SCI Information Security Programs, including planning and execution of security staff assistance visits, surveys, assessments, and quarterly meetings</li><li>Internal assessments and marking accuracy; courier services; classified material handling and destruction; security incident management; classification and declassification management</li><li>Security Classification Guide (SCG) support; prepublication and security reviews; Controlled Unclassified Information (CUI) Program</li><li>Industrial security program support</li><li>NATO SECRET Sub-registry support and Security Education, Awareness &amp; Training (SETA) program execution.</li></ul>Position Requirements:<ul><li>Minimum of five (5) years of experience.</li><li>Active Top Secret security clearance (Interim Top Secret acceptable) based upon a Tier 5 investigation completed within the past five (5) years, and eligible for access to Sensitive Compartmented Information (SCI), NATO information, and CNWDI.</li><li>For the overall Information Security team: two (2) contractors shall be certified to operate destruction equipment, including a Security Engineered Machinery (SEM) Model 23/5 disintegrator; one (1) contractor shall be trained to process all security matters involving Foreign Partners, information sharing, escorts, and access requests; and two (2) declassification specialist contractors shall be trained to process mandatory/systematic/automatic declassification.</li><li>Certified by Department of Energy (DoE) to conduct reviews and identify DoE-related information, and Personnel Security Clearance read-on to CNWDI and RD/FRD (for declassification tasks).</li><li>Knowledge of the Federal Enterprise Architecture (FEA) and Department of Defense (DoD) Enterprise Architecture framework (e.g., SIPR, NIPR and Joint Worldwide Intelligence Communications Systems (JWICS) networks), and the Information Technology (IT)/Cybersecurity rules and regulatory authorities to develop and implement policies and planning concepts, and project management methods.</li><li>Knowledge of governing laws, regulations, precedents, and directives governing DoD security programs (e.g. information, personnel, physical, industrial, etc.).</li><li>General knowledge and perspective of the operational, procedural, and technical standards that achieve interoperability with other non-DoD Federal Government agencies</li><li>U.S. citizen (required for clearance and access).</li></ul>Preferred:<ul><li>Certified to operate destruction equipment, including a Security Engineered Machinery (SEM) Model 23/5 disintegrator</li><li>Trained to process all security matters involving Foreign Partners, information sharing, escorts, and access requests.</li><li>Foreign Disclosure Training</li></ul>This position is located in Doral, Florida.Apply online: VEVRAA Federal ContractorThree Saints Bay, LLC and its subsidiaries offer a team-oriented working environment and the opportunity to work with exceptional, dedicated industry professionals. We offer our employees a comprehensive benefits package and the opportunity to take part in exciting projects with government and commercial clients, both domestic and international.We are an Equal Opportunity Employer. We invite resumes from all interested parties without regard to race, color, sex, sexual preference, religion, creed, national origin, age, genetic information, marital or veteran status, disability, or any other category protected by federal, state, or local law.Benefits:<ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Health savings account</li><li>Life insurance</li><li>Paid time off</li><li>Vision insurance</li></ul>Work Location: In person

Information Security Specialist (5728)

NMC Health plc

<div>Actively monitor the networks, systems, applications, IT assets and bio-medical equipment&rsquo;s for suspicious activity and threats. Using offensive and defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or may occur within the network and make the initial decision on the event/ threat severity.</div>
 <div><ul><li>Manage network, intrusion detection and prevention systems.
</li><li>Conduct periodic compromise assessments across selected networks and propose recommendations based on assessment results.
</li><li>Conduct physical security assessment of the organization&rsquo;s systems, including servers and networks, ensuring that any unauthorized external physical interference is not actually possible.
</li><li>Conduct ongoing network hunt activities.
</li><li>Conduct proactive vulnerability assessment across the network, subnetworks and service traffic to identify potential points of intrusion.
</li><li>Research and develop methods of tracking and detecting malicious activity within a network.
</li><li>Develop tools, signatures, and methods of detection for use in incident response activities.
</li><li>Develop SIEM integrations, dashboards, and analytics to illuminate and visualize threat activity.
</li><li>Analyze network traffic to provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.
</li><li>Uses data collected from a variety of cyber defense tools (e.g., anti-virus, IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments, perform cyber defense trend analysis and reporting, and perform event correlation to mitigate threats and gain situational awareness and determine the effectiveness of an observed attack.
</li><li>Carries out triage to ensure that a genuine security incident is occurring.
</li><li>Coordinate with entity-wide cyber defense staff to validate network alerts.
</li><li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event&rsquo;s history, status, and potential impact for further action in accordance with the organization&rsquo;s cyber incident response plan.
</li><li>Document and escalate incidents (including event&rsquo;s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
</li><li>Provide daily summary reports of network events and activity relevant to cyber defense practices.
</li><li>Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
</li><li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.
</li><li>Isolate and remove malware.
</li><li>Develop content for cyber defense tools use them for continual monitoring and analysis of network activity to identify malicious activity.
</li><li>Assist in the construction of signatures which can be implemented on cyber defense tools in response to new or observed threats within the network environment.
</li><li>Analyze and report organizational security posture trends.
</li><li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus, Threat Intelligence Providers) to maintain updated of cyber defense threat condition and determine which security issues may have an impact on the enterprise.
</li><li>Provides cybersecurity recommendations based on significant threats and vulnerabilities.
</li><li>Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operational Plans.
</li><li>Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) and use discovered data to enable mitigation of potential cyber incidents within the enterprise.
</li><li>Use specialized equipment and techniques to catalog, document, extract, collect, package, and preserve digital evidence.
</li></ul>Utilize deployable forensics toolkit to support operations as necessary</div>
 <div>Knowledge
<ul><li>Security concepts such as cyber-attacks and techniques, threat vectors, risk and threat management, incident management etc.
</li><li>Networking concepts and protocols, and network security attacks, vulnerabilities, processes, methodologies, access control mechanisms, traffic analysis methods.
</li><li>Cyber threats and vulnerabilities and information dissemination sources (e.g., alerts and advisories).
</li><li>Cyber defense and vulnerability assessment tools and their capabilities.
</li><li>System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
</li><li>Scripting languages (e.g., Python, Perl, Bash) used in an incident response environment
</li><li>Incident response and handling methodologies.
</li><li>Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools, applications, methodologies and techniques for detecting host and network-based intrusions.
</li><li>Threat investigations, reporting and investigative tools.
</li><li>Cyber defense and information security policies, procedures, and regulations.
</li><li>Common attack vectors, the different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks) and attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
</li><li>Cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored), and attackers&rsquo; methodologies.
</li><li>Signature implementation impact for viruses, malware, and attacks.
</li><li>Windows/Unix ports and services.
</li><li>Relevant laws, legal authorities, restrictions, and regulations pertaining to cyber defense activities.
</li><li>Packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
</li><li>Use of sub-netting tools.
</li><li>Penetration testing principles, tools, and techniques.
</li><li>Investigation, auditing and forensics methods, processes, procedures and standards.
</li><li>Different types of hardware, storage, imaging and file system analysis.
</li><li>Data backup and recovery.
</li></ul>Skills
<ul><li>Using SIEM/SOAR and Vulnerability Management tools and services.
</li><li>Sysadmin skills (Linux/Mac/Windows).
</li><li>Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, and more).
</li><li>Identifying, analyzing and interpreting trends or patterns in complex data sets.
</li><li>Developing and deploying signatures.
</li><li>Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
</li><li>Using incident handling methodologies.
</li><li>Collecting data from a variety of cyber defense resources.
</li><li>Recognizing and categorizing types of vulnerabilities and associated attacks.
</li><li>Performing packet-level analysis.
</li><li>Conducting trend analysis.
</li><li>Using cyber defense reporting structure and processes.
</li><li>Utilizing a combination of automated and manual testing methods.
</li><li>Developing automated vulnerability testing scripts and using off the shelf vulnerability testing tools.
</li><li>Conducting vulnerability scans and recognizing vulnerabilities in networks, systems and applications.
</li><li>Using of penetration testing tools and techniques.
</li><li>Applying analytical and problem-solving skills.
</li></ul>Ability
<ul><li>Collaborate with other sections across the department to enhance detection capabilities.
</li><li>Perform Malware analysis.
</li><li>Work closely with management to respond appropriately to the results of assessments and mitigation oversight of found vulnerabilities.
</li><li>Perform data analysis, correlation, and analytics leveraging Security Information and Event Management (SIEM) tools.
</li><li>Conduct vulnerability scans and recognize vulnerabilities in security systems &amp; devices.
</li><li>Accurately and completely source all data used in intelligence, assessment and/or planning products.
</li><li>Apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
</li><li>Interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute).
</li><li>Prepare and create regular reports to document any security breaches/ incidents.
</li><li>Provide forensic support to Cyber Security Operations during the investigation of any detected threat or contained incident / event to determine root cause and propose response recommendations as required.
</li></ul>Education and Certification
<ul><li>Bachelor&rsquo;s degree in an information technology, computer science, cyber security or equivalent work experience.
</li><li>CompTIA Security+
</li><li>CISSP: Certified Information Systems Security Professional
</li><li>GCFA: GIAC Certified Forensic Analyst
</li><li>GCIH: GIAC Certified Incident Handler
</li><li>GCIA: GIAC Certified Intrusion Analyst
</li><li>OSCP: Offensive Security Certified Professional
</li><li>CEH: Certified Ethical Hacker
</li><li>CPT: Certified Penetration Tester
</li></ul>Experience
<ul><li>3 years of experience in cyber security operations with expertise in managing the Security Operations Center
</li><li>UAE experience preferred.</li></ul></div>

Information Security Specialist

MANTECH

<div>MANTECH seeks a motivated, career and customer-oriented COMSEC Information Security Specialist to join our team in Washington, D.C..
Responsibilities include but are not limited to:<ul><li>
Responsible for applying Information Assurance expertise and knowledge to network and/or enterprise security.</li><li>
Familiar with and able to apply &ldquo;best practices&rdquo; security methodologies.</li><li>
Functional expertise in one or more information assurance technologies or capabilities such as Vulnerability/Threat Assessments, Network Intrusion Detection, Secure Operations, Firewall Design &amp; Deployment, Public Key Encryption, Virtual Private Networks, etc. Provides COMSEC helpdesk support to client&rsquo;s personnel during normal business hours and during emergency events</li><li>
Interfaces with all necessary levels of management and staff regarding Information Assurance services.</li><li>
Maintains and updates client&rsquo;s COMSEC Policy Guide and COMSEC SOPs. Conduct semi-annual inventories of COMSEC sub-accounts.</li><li>
Plans and conducts compliance audits and inspections on client&rsquo;s COMSEC accounts.</li><li>
Provides COMSEC Access Briefings and debriefings when requested by the client.</li></ul>
Minimum Qualifications:<ul><li>
B.A. or B.S. in related field with one (1) year of experience maintaining and sustaining enterprise environments. Degree may be substituted for four (4) years of professional enterprise services experience for a total of five (5) years.</li><li>
Strong understanding of COMSEC disciplines.</li><li>
Knowledgeable about the National Security Agency (NSA) policies and accounting procedures required for coordinating customers&rsquo; requirements and resolving COMSEC matters.</li><li>
Strong proficiency in Microsoft Excel.</li></ul>
Preferred Qualifications:<ul><li>
4 years of customer service, administrative services/Asset Management experience</li><li>
4 years of COMSEC custodian experience</li><li>
Security+ certification</li></ul>
Clearance Requirements:<ul><li>
Must be a US Citizen and possess a current/active TS/SCI clearance</li><li>
Must be willing and able to pass a polygraph</li></ul>
Physical Requirements:<ul><li>
The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.</li><li>
Must be able to lift and move hardware weighing up to 50 pounds.</li></ul></div>

COMSEC Information Security Specialist

Celestar Corporation

<div></div><div><div>Celestar Corporation is seeking an Information Security Specialist to support USSOUTHCOM J2 Physical Security Services. The primary place of performance will be in Doral, FL. If interested and meet the qualifications, we encourage you to apply for this rewarding and impactful opportunity. 
ANTICIPATED AWARD: July 2026 
ANTICIPATED START: July 2026 
PERIOD OF PERFORMANCE: 1 Base Year + 4 Option Years 
LOCATION: Doral, Florida 
CLEARANCE REQUIREMENT: Active TS/SCI (within 5 years)
About Us:
Celestar, a B&amp;A Company, offers highly competitive salaries and benefits. Our comprehensive benefits package includes company-paid employee and family dental insurance, employee health insurance, life insurance, and disability coverage. Additionally, we provide a 401(k)-retirement plan with company matching, paid holidays, and personal time off.
Responsibilities include, but are not limited to:<ul><li>
Conduct information security tasks in support of USSOUTHCOM collateral and SCI Information Security Programs. Personnel assigned to conduct Information Security tasks will primarily work in the USSOUTHCOM HQ building. Personnel conducting destruction services will also work in the Installation Services Building (Media Destruction Center).</li><li>
Conduct planning and execution of security staff assistance visits (virtual and in-person), surveys, assessments, and quarterly meetings supporting the Command Security Manager Program. Document observations and results IAW USSOUTHCOM procedures.</li><li>
Conduct internal assessments using established checklists and IAW USSOUTHCOM policy. Evaluate document marking accuracy through sampling, documenting results and on-the-spot corrections. Recommend corrective actions to assess overall security program&rsquo;s health and classified information is properly marked.</li><li>
Process courier requests, preparing courier cards and travel authorization letters within 3 business days. Maintain an excel spreadsheet for accountability and reporting, submitting weekly metrics.</li><li>
Prepare classified information for transmission or transportation and provide related training. Maintain a classified material inventory and destroy material IAW records management disposition instructions and USSOUTHCOM policy.</li><li>
Process reported/suspected security incidents IAW local policy, including preliminary inquiries and maintaining incident files (electronic and hard copy). Collaborate with IT and DISA as</li><li>
directed by the COR to sanitize systems and printers, issue notifications, prepare reports, and identify trends.</li><li>
Assist with original and derivative classification, and the mandatory/systematic/automatic declassification programs, utilizing established guides. Apply appropriate markings/redactions to prevent unauthorized disclosure.</li><li>
Assist with preparing SCGs and maintaining the SCG library.</li><li>
Assist with conducting prepublication and security reviews, providing recommendations and identifying equities for referrals.</li><li>
Implement and maintain the CUI Program, conducting data collection and evaluating marking compliance through sampling. Document results, recommend corrective actions, and conduct preliminary inquiries as required, ensuring proper CUI marking.</li><li>
Collect data quarterly, review for accuracy, and resolve discrepancies. Maintain databases/spreadsheets to document data collection and prepare reports for inclusion in the Annual Agency Classification Management Report/Data Call.</li><li>
Maintain and execute the USSOUTHCOM Industrial Security Program requirements IAW DoD and SOUTHCOM policy.</li><li>
Assist with maintaining and executing the USSOUTHCOM NATO SECRET Sub-registry, aiding the program manager and control points.</li><li>
Establish and maintain a repository/tracking system (e.g., spreadsheet, database) to document SOUTHCOM Classification/Declassification Guides, prepublication/security reviews, security incidents, DD Form 254s, appointed Contract Monitors, designated OCAs, and declassification authorities. The repository must be searchable and facilitate review.</li><li>
Execute a comprehensive SETA program including newcomer orientation, annual training, refresher courses, and awareness materials (CBTs, presentations, pamphlets, newsletters). Provide monthly training completion rates.</li><li>
Collect classified/CUI material weekly for destruction IAW local policies, transporting it to the Media Destruction Facility. Destroy material IAW procedures, removing waste by products and reporting destruction backlog weekly.</li><li>
Operate the SEM Model 23 disintegrator and perform operator level maintenance. Coordinate service, cleaning, blade replacement, and supply acquisition with COR, following the separate maintenance contract (quarterly with emergency calls as needed).</li><li>
Provide Two-Person Integrity (TPI) capability IAW USSOUTHCOM policy for destruction of Top Secret, SAP, SCI, and other materials.</li><li>
Operate and maintain degaussing and data destruction equipment, breaking down media for efficient destruction. Field test functions within guidance and undergoes annual calibration, following the separate maintenance contract (quarterly with emergency calls as needed).</li><li>
Complete destruction of all USSOUTHCOM classified information and media.</li><li>
Coordinate and schedule classified withholdings pickups, including special pickups for personnel leaving, retiring, PCSing, or during emergency response events.</li><li>
Maintain expendable media destruction supply inventory and equipment certification/maintenance schedule, submitting requests to the COR 30 days in advance or as requested.</li><li>
Assist with administering DCS actions, preparing documentation, conducting pickups/drop-offs, and performing receipt/delivery of materials.</li><li>
Assist with declassification requests (MDR, ADR, SDR, Ad Hoc), reviewing requests and identifying their nature (investigations, legal proceedings).</li><li>
Track classified information from origination to its 20-year mark and submit for government approval for release to NARA.</li><li>
Develop and maintain an internal quality control/review program to services are performed within accepted government practices, identifying and preventing defective casework.</li><li>
Maintain a list of substantive error/unacceptable review findings, with the quality control procedures responsible for identification, monitoring, and correction.</li><li>
Track declassification requests from date of request to suspension or release, logging incorrect disposition decisions and referrals to other agencies.</li><li>
Conduct line-by-line review of documents for redaction related to MDR requests.</li><li>
Assist with conducting security walk-throughs and inspections to compliance, prevent incidents, and unauthorized disclosure. Make on-the-spot corrections and report incidents IAW local policy. Provide monthly and annual reports.</li><li>
Provide support during standard working hours or as required by FLO/EXO presence.</li><li>
Serve as the primary point of contact for all security-related matters involving FLOs/EXOs, facilitating information sharing, escorts, and access requests.</li><li>
Recommend the authorization/denial of classified information releases, ensuring compliance with regulations and developing policies governing information transfer to foreign partners.</li><li>
Prepare briefings, papers, and responses for senior leadership on security and foreign disclosure.</li></ul>
Required qualifications/skills (Must Be Reflected on Your Resume):<ul><li> 5 years of related experience.</li><li> Knowledge of the Federal Enterprise Architecture (FEA) and Department of Defense (DoD) Enterprise Architecture framework (e.g., SIPR, NIPR and Joint Worldwide Intelligence Communications Systems (JWICS) networks), and the Information Technology (IT)/Cybersecurity rules and regulatory authorities to develop and implement policies and planning concepts, and project management methods.</li><li> Knowledge of governing laws, regulations, precedents, and directives governing DoD security programs (e.g. information, personnel, physical, industrial, etc.)</li><li> Knowledge and perspective of the operational, procedural, and technical standards that achieve interoperability with other non-DoD Federal Government agencies</li><li> Proficient using basic Microsoft Office software applications (e.g., Word, PowerPoint, Excel, and Access).</li><li> Proficient in using personnel security processing tools, including the DoD personnel security system of record (e.g., DISS, etc.) and National Background Investigation System (NBIS).</li><li> Certified to operate destruction equipment, including a Security Engineered Machinery (SEM) Model 23/5 disintegrator.</li><li> Trained to process all security matters involving Foreign Partners, information sharing, escorts, and access requests.</li><li> Certified by Department of Energy (DoE) to conduct reviews and identify DoE related information, and Personnel Security Clearance read on to CNWDI and RD/FRD to prevent unauthorized disclosure of DoE classified information.</li><li> Active TS/SCI (within 5 years)</li></ul> 
Desired Education and Experience:<ul><li> 
 Bachelor&rsquo;s degree in a related field, preferred</li><li> Foreign Disclosure Training (Annually), preferred</li></ul> 
Come on board with a company that Values its Employees!<div> 
Celestar Corporation is an Equal Opportunity Employer. The Celestar Corporation prohibits discrimination, harassment, and retaliation in employment based on race; color; religion; genetic information; national origin; sex (including same-sex); sexual orientation; gender identity; pregnancy, childbirth, or related medical conditions; age; disability or handicap; citizenship status; marital status; service member/protected veteran status; or any other category protected by federal, state, or local law.</div></div></div>

Information Security Specialist - SOUTHCOM J2

Los Alamos National Laboratory

<div>What You Will Do 
 
This position will be filled at either the Computer and Information Security Specialist 1 or 2 level, depending on the skills of the selected candidate. Additional job responsibilities (outlined below) will be assigned if the candidate is hired at the higher level.
 
 
This position is responsible for supporting the Argus Security System at the Los Alamos National Laboratory (LANL) Department of Energy site. The Argus Security System is developed and maintained at Lawrence Livermore National Laboratory (LLNL) and deployed at LANL. The Argus system is a network based distributed computerized control system with significant security and reliability features. This individual will report to the Team Leader and is responsible for a wide range of duties centered around maintenance activities.
 
 
Duties may include: 
 
Computer &amp; Information Security Specialist 1 ($72,800 - $115,400)
 
The selected candidate will ensure maintenance databases in the computerized maintenance management system reflect the current configuration of the Argus perimeter and interior systems. They will generate work orders for Argus corrective and scheduled maintenance activities. They will input scheduling information into the Operations Control schedule utility (Microsoft Outlook). The candidate will be required to create preventive maintenance record worksheets from current system database and distribute to the appropriate team leaders. 
 
Computer &amp; Information Security Specialist 2 ($87,800 - $143,000)
 
 
In addition to what was outlined at the lower level, at this level the selected candidate will retrieve Argus system logs and provide in depth analysis of False and Nuisance Alarm data to create extensive maintenance reports to upper management. Maintain high competency in Microsoft Excel, Splunk, and Tableau software packages. Review utility outage forms and provide clients and security technicians with information on security system impact. 
 
What You Need 
 
Minimum Job Requirements: 
<ul><li>
Demonstrate success in client management and ability to resolve issues successfully.</li><li>
Knowledge of security system functions, technologies, equipment, maintenance, compensatory measures, and operations.</li><li>
Demonstrate knowledge of the Microsoft Office software suite with an emphasis on Excel.</li></ul>
Additional Job Requirements for Computer &amp; Information Security Specialist 2: 
In addition to the requirements outlined above, qualification at the higher level requires: 
<ul><li>
Experience and demonstrated skill in conducting research, investigating alternative solutions, and recommending solutions on problems affecting computer and information security.
</li><li>Understand statistical analysis as related to security sensors and maintenance activities.</li><li>
In-depth knowledge of the Laboratory's computer and information security policies, practices, and procedures.</li></ul>
Computer and Information Security Specialist 1 Education Required: Position requires a minimum of 2 years related experience, or an equivalent combination of education and experience. 
 
Computer and Information Security Specialist 2 Education Required: Position requires a bachelor's degree and 5 years related experience; or, an equivalent combination of education and experience directly related to the occupation. 
 
Desired Qualifications: 
<ul><li>
Proven success in working with multiple, diverse teams both internal and external (including the Protective Force) to collaboratively achieve task goals utilizing interpersonal, oral, and written communication skills.</li><li>
Knowledge and experience with DOE &amp; NNSA policies and orders. Specifically, DOE O 473.1A Physical Protection Programs.</li><li>
Knowledge of the Argus Security System, Protective Force operations and responses, especially alarm console operations.</li><li>
Knowledge of computer system data logs and programming data retrieval software for analysis.</li><li>
Knowledge of network server administration including updating software and resolving vulnerability reports.</li></ul> 

Work Environment: 
 
Work Location: The work location for this position is onsite and located in Los Alamos, NM. All work locations are at the discretion of management. 
 
Work Environment: Work Environment: Indoors, working alone, working overtime or irregular schedules. 
 
Position Commitment: Regular appointment employees are required to serve a period of continuous service in their current position in order to be eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the time required, they may only apply for Laboratory jobs with the documented approval of their Division Leader. The position commitment for this position is 1 year. 

 
Note to Applicants: For full consideration, applicants must submit a comprehensive cover letter that addresses the key requirements of the position.
 
<ul><li>Minimal travel is anticipated but may be required for training purposes.</li><li>
References will be required.</li><li>
Must maintain a valid New Mexico driver's license.</li></ul>
Due to federal restrictions contained in the current National Defense Authorization Act, citizens of the People's Republic of China - including the special administrative regions of Hong Kong and Macau - as well as citizens of the Islamic Republic of Iran, the Democratic People's Republic of Korea (North Korea), and the Russian Federation, who are not Lawful Permanent Residents (&quot;green card&quot; holders) are prohibited from accessing facilities that support the mission, functions, and operations of national security laboratories and nuclear weapons production facilities, which includes Los Alamos National Laboratory. 
 
Where You Will Work 
 
Located in beautiful northern New Mexico, Los Alamos National Laboratory (LANL) is a multidisciplinary research institution engaged in strategic science on behalf of national security. Our generous benefits package includes:<ul><li>
PPO or High Deductible medical insurance with the same large nationwide network</li><li>
Dental and vision insurance</li><li>
Free basic life and disability insurance</li><li>
Paid childbirth and parental leave</li><li>
Award-winning 401(k) (6% matching plus 3.5% annually)</li><li>
Learning opportunities and tuition assistance</li><li>
Flexible schedules and time off (PTO and holidays)</li><li>
Onsite gyms and wellness programs</li><li>
Extensive relocation packages (outside a 50 mile radius)</li></ul> 

Additional Details 
 
Directive 206.2: Employment with Triad requires a favorable decision by NNSA indicating employee is suitable under NNSA Supplemental Directive 206.2. Please note that this requirement applies only to citizens of the United States. Foreign nationals are subject to a similar requirement under DOE Order 142.3A. 
 
Clearance: Q (Position will be cleared to this level). Selected applicants will be subject to a background investigation conducted by or on behalf of the Federal Government, and must meet eligibility requirements* for access to classified matter. This position requires a Q clearance. and obtaining such clearance requires US Citizenship except in extremely rare circumstances. Dependent upon the position, additional authorization to access classified information may be required, which may or may not be available to dual citizens. Receipt of a Q clearance and additional access authorization ultimately is a decision of the Federal Government and not of Triad. 
 
<ul><li>Eligibility requirements: To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE Order 472.2 for additional information.</li></ul>
 
New-Employment Drug Test: The Laboratory requires successful applicants to complete a new-employment drug test and maintains a substance abuse policy that includes random drug testing. Although New Mexico and other states have legalized the use of marijuana, use and possession of marijuana remain illegal under federal law. A positive drug test for marijuana will result in termination of employment, even if the use was pre-offer. 
 
Regular Position: Term status Laboratory employees applying for regular-status positions are converted to regular status. 
 
Internal Applicants: Regular appointment employees who have served the required period of continuous service in their current position are eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the required period of continuous service, they may only apply for Laboratory jobs with the documented approval of their Division Leader. Please refer to Policy P701 for applicant eligibility requirements. 
 
Equal Opportunity: Los Alamos National Laboratory is an equal opportunity employer and supports a diverse and inclusive workforce. All employment practices are based on qualification and merit, without regard to race, color, national origin, ancestry, religion, age, sex, gender identity, sexual orientation, marital status or spousal affiliation, physical or mental disability, medical conditions, pregnancy, status as a protected veteran, genetic information, or citizenship within the limits imposed by federal laws and regulations. The Laboratory is also committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. To request such an accommodation, please send an email to applyhelp@lanl.gov or call 1-505-664-6947 option 2.</div>

Argus Computer and Information Security Specialist 1 OR 2

NTT DATA

<div>Req ID: 365387
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
We are currently seeking a Information Security Senior Specialist to join our team in Merrifield, Virginia (US-VA), United States (US).
Job Summary:
The Cyber Defense &amp; Incident Responder is responsible for monitoring, analyzing, and responding to assigned cybersecurity incidents in accordance with established procedures. This role focuses on incident triage, investigation, containment, and recovery to minimize impact and restore normal operations. Analysts leverage security tools, event logs, correlation data, and threat intelligence to determine the nature and scope of incidents, document findings, and recommend remediation steps. 
Job Duties:
1. Monitor enterprise security systems and analyze alerts to identify potential cybersecurity incidents.
a. Review SIEM, IDS/IPS, EDR, and other related tool alerts for anomalous activity and indicators of compromise/attacks (IOCs/IOAs).
b. Validate alerts to reduce false positives and prioritize based on severity and potential impact.
2. Perform initial triage and analysis of security events to determine scope, severity, and urgency.
a. Examine log data, network telemetry, and endpoint information to identify possible malicious activity.
b. Correlate event details with internal and external threat intelligence.
3. Execute incident response actions in accordance with established procedures.
a. Contain affected systems, remove malicious artifacts, and assist in system recovery.
b. Escalate complex or critical incidents to Senior SOC Analysts or SOC Leads.
4. Document and communicate incident findings to support resolution and improvement efforts.
a. Prepare incident tickets, timelines, and investigative notes.
b. Contribute to after-action reviews (AARs) and post-incident reporting.
c. Create incident tickets
d. Upload supporting evidence, draw sound conclusions and upload artifacts
e. Communicate effectively, providing clear, accurate, and concise information
f. Exercise sound analytical skills to derive correct conclusions associated with incident investigations.
5. Maintain SOC processes, tools, and playbooks to ensure effective incident handling.
a. Recommend refinements to SOPs and escalation procedures.
b. Identify opportunities to streamline analysis workflows and improve detection capabilities.
6. Participate in training, exercises, and knowledge-sharing to strengthen response readiness.
a. Support red, blue, or purple team exercises when directed.
b. Share lessons learned and best practices with SOC team members.
7. Stay informed on current and emerging cyber threats relevant to the organization&rsquo;s environment.
a. Track evolving tactics, techniques, and procedures (TTPs) of threat actors.
b. Incorporate relevant intelligence into incident analysis and response.<div></div><div> 
Basic Qualifications:</div><ul><li>
Bachelor's degree in information technology, cybersecurity, data science, information systems, or computer science.</li><li><ul><li>
Education Equivalency: One-and-one- half (1.5) years of additional experience can substitute for one (1) year of a typical degree program.</li></ul></li><li>
Minimum 6 years of experience in Information Technology (IT) and/or Information Security (IS).</li><li>
DoD 8140 certification for their respective area or the ability to obtain certification within six (6) months of onboarding.</li><li>
Ability to obtain a interim Secret Security Clearance and must be eligible for a Top-Secret clearance if requested.</li></ul><div></div> 
About NTT DATA
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&amp;D.
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client&rsquo;s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.</div>

Information Security Senior Specialist

Linchpin Solutions Inc

<div>Description:

If you are looking for an exciting career opportunity in the IT, engineering, software development, logistics, and project management fields, Linchpin Solutions is the place to be! We are currently hiring for a dynamic and experienced Cybersecurity Specialist.
Clearance: Active DoD Secret Clearance
Work Schedule: Fulltime, Onsite M-F.
Role Overview:
The Cybersecurity Specialist will develop and enforce an organization's security rulebook, ensuring compliance with regulations. The Cybersecurity Specialist will also implement and monitor various security measures, acting as guardians of the organization's firewalls and intrusion detection systems. You will also serve as a security detective, identifying and responding to cyber threats, and sometimes conducting investigations.
General Skillset<ul><li>
Experience with Microsoft Office</li><li>
Verbal and written communication skills</li><li>
Ability to work both collaboratively and individually</li><li>
Critical Thinking Skills</li><li>
Ability to give presentations and briefings as needed</li></ul>
Specific Skillset<ul><li>
Operate all aspects of Information Systems (IS) data availability, integrity, authentication, confidentiality, and non-repudiation.</li><li>
Implement and monitor security measures for communication systems, networks, and provide advice that systems and personnel adhere to established security standards and Governmental requirements for security on these systems.</li><li>
Develop and execute Government-approved security policies, plans, and procedures; implement data network security measures; operate and monitor network intrusion detection and forensic systems; conduct IS security incident handling; support Continuity of Operations Plan/Disaster Recovery (COOP/DR) plans, and perform certification of IS and networks.</li><li>
Perform other information security duties including operation of Electronic Key Management System (EKMS) and maintenance of Public Key Infrastructure (PKI).</li><li>
Operate Host Based Security System (HBSS), firewalls, Intrusion Prevention Systems (IPS), Intrusion Detection Systems (IDS), other point of presence security tools, Virtual Private Networks (VPNs), and related security operations.</li><li>
Perform defensive cyber operation duties including, but not limited to, ensuring workstation and server compliance with Marine Corps McAfee Host Based Security System (HBSS) requirements; identifying cybersecurity incidents using HBSS, Tenable SecurityCenter, RedSeal, McAfee Security Information and Event Manager (SIEM), and other automated tools; operating Imperva Web Application and Database firewalls; performing forensics and remedial action on cybersecurity incidents; and reporting defensive cyber operations statistics.</li></ul>
Requirements:

Education &amp; Certifications<ul><li>
Highschool Diploma or GED Equivalent</li><li>
CompTIA Security +</li><li>
CISSP OR CISA</li></ul>
Experience Requirements<ul><li>
5+ Years of Cybersecurity experience</li><li>
Experience with Incident response</li><li>
Experience with Government cybersecurity standards</li></ul>
Build Your Career With Us
Linchpin Solutions&rsquo; professional services organization is committed to delivering qualified candidates that meet or exceed clients&rsquo; technical and management expectations. Our growth means exciting career opportunities for talented professionals in IT, engineering, software development, logistics, project management, and other key areas. We provide personnel that become valuable assets to the organizations they serve and contribute to the overall skill diversity and strength of the Linchpin Team. 
Career Choices
Linchpin&rsquo;s success comes from the talent and commitment of our professionals. As one team, we share the challenges and rewards that come from growing the company, which reinforces our culture of ownership. All of our professionals benefit from the value we collectively create. 
Pay Transparency Statement:
Linchpin Solutions is committed to compliance with applicable pay transparency laws and regulations. Final compensation for any position will be determined based on a variety of factors, including but not limited to:<ul><li>
Relevant prior work experience</li><li>
Education and certifications</li><li>
Specific skills and competencies</li><li>
Federal Government contract labor categories and wage rates</li><li>
Geographic location</li></ul>
While salary ranges may be provided for a position, these ranges are not a guarantee of final compensation, which may vary based on individual qualifications and the specific requirements of the contract. 
Benefits:
In addition to competitive compensation, Linchpin Solutions offers a variety of benefits, including:<ul><li>
Health, dental, and vision insurance</li><li>
401(k) plan with company matching</li><li>
Flexible Spending Accounts (FSA)</li><li>
Company-funded disability and life insurance</li><li>
Paid time off (PTO) and company-paid holidays</li><li>
Employee Assistance Program (EAP)</li><li>
Educational assistance and parental leave</li></ul>
Please note that the specific benefits and compensation details may vary depending on the employee&rsquo;s position, date of hire, and contract terms. 
Cyber Security Message
Linchpin Solutions follows a specific recruiting practice to protect all candidates. We will never request any financial information immediately. Do not reveal confidential or sensitive information without ensuring the request is coming from Linchpin Solutions directly. Please do not hesitate to contact us at (443) 707-3070 if you suspect any type of social engineering attacks such as phishing, spear phishing, baiting or any other suspicious activity. 
Equal Opportunity Employment Statement
We are an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.</div>

Cybersecurity Specialist IV

Search 10000+ Information security specialist jobs near you this May. New roles added regularly across leading industries. Apply today.