information systems security specialist

Infinite pl

<div><div>Infinite pl is a digital-led tech firm driven to become a digital logistics pioneer by harnessing the power of people, data, and platforms. We are enabled through in-house, external, network, and investment capabilities that we utilize to orchestrate and build innovative platforms tackling complex problems within logistics and adjacent sectors.

Infinite pl&rsquo;s mission is nothing short of a logistics revolution! We're here to enrich the experiences of governments, businesses, and residents around the world through cutting-edge digital solutions.

We're not just players; we're game-changers.
</div>
<h3 class="jobSectionHeader">Role Summary:</h3><div>
The Senior IT Security Specialist supports IT security operations by ensuring effective implementation of security controls across IT systems, infrastructure, and services.</div><h3 class="jobSectionHeader">
Key Responsibilities:</h3><ul><li>Implement IT security operational controls across systems and applications</li><li>Support access management and privileged account governance</li><li>Conduct operational security reviews and compliance checks</li><li>Support resolution of IT security operational issues and incidents</li><li>Monitor system security configurations and identify gaps</li><li>Assist in vulnerability remediation from an IT operations perspective</li><li>Support IT audits and compliance activities</li><li>Work closely with infrastructure and application teams to enforce standards</li></ul><h3 class="jobSectionHeader">
Key Requirements:</h3><ul><li>Strong experience in IT operations and system security controls</li><li>Good understanding of IT infrastructure, cloud, and enterprise systems</li><li>Knowledge of ITIL processes and access governance</li><li>Experience in supporting IT audits and compliance requirements</li><li>Relevant certifications (ITIL, Security+, or equivalent preferred)</li></ul><div>
Infinite pl ️ - where innovation meets logistics, and the journey is Infinitely boundless! 
Let's disrupt logistics together and explore infinite opportunities!</div>

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div>

Senior IT Security Specialist

DOHA BANK Q.P.S.C.

Doha Bank Q.P.S.C is one of the largest private commercial banks in Qatar. Established in 1979. Offers retail, corporate, international, treasury, and investment banking servicesThe IT Infrastructure Security Specialist at Doha Bank is responsible for protecting the bank&rsquo;s IT infrastructure, networks, endpoints, and systems against cyber threats.Key Responsibilities:1. Infrastructure Security ManagementMaintain secure architecture for enterprise IT systems2. Threat Monitoring &amp; Incident Response3. Vulnerability &amp; Risk Management4. Compliance &amp; Regulatory Security5. Security Tools &amp; Technology Operations6. Collaboration &amp; ProjectsRequired Skills &amp; Qualifications:Bachelor&rsquo;s degree in Computer Science / IT / Cybersecurity / Engineering7&ndash;10+ years experience in IT security or infrastructure securityStrong knowledge of:Network securityFirewalls, IDS/IPSEndpoint securityCloud security basicsExperience in banking or financial services (preferred)Certifications (any 2&ndash;3 preferred):CCNA / CCNP SecurityCEHCISSP / CISMSecurity+ / CISAJob Type: Full-timePay: From QAR18,000.00 per monthWork Location: In person

IT Infrastructure Security Specialist (Doha Bank Q.P.S.C)

The Aerospace Corporation

<div>The Aerospace Corporation is the trusted partner to the nation&rsquo;s space programs, solving the hardest problems and providing unmatched technical expertise. As the operator of a federally funded research and development center (FFRDC), we are broadly engaged across all aspects of space&mdash; delivering innovative solutions that span satellite, launch, ground, and cyber systems for defense, civil and commercial customers. When you join our team, you&rsquo;ll be part of a special collection of problem solvers, thought leaders, and innovators. Join us and take your place in space.
The Aerospace Corporation is the trusted partner to the nation's space programs, solving the hardest problems and providing unmatched technical expertise. As the operator of a federally funded research and development center (FFRDC), we are broadly engaged across all aspects of space &mdash; delivering innovative solutions that span satellite, launch, ground, and cyber systems for defense, civil and commercial customers. When you join our team, you'll be part of a special collection of problem solvers, thought leaders, and innovators. Join us and take your place in space.
The Information Systems and Cyber Division (ISCD) is a unique engineering division partnering across the full space enterprise to advance next-generation digital solutions and software-enabled mission capabilities. With customers spanning the DoD, Intelligence Community (IC), civil and commercial space, ISCD blends expertise in software architecture, AI/ML systems, data fabric/architecture, advanced cloud and edge platforms, cybersecurity, and full-stack engineering through mission-focused, collaborative, multi-disciplinary teams. These collaborative teams leverage hands-on prototyping and applied R&amp;D to support customer concepts, software architecture and development, and integration of the latest digital technology solutions. By bringing multi-disciplinary technical insight to critical space missions, ISCD is positioned at the forefront of innovative software and technology for excited new ways to make real-world impact.
Aerospace&rsquo;s Cyberspace Systems &amp; Security Subdivision (CS3) is seeking a Mission Cyber Architect to work closely with key stakeholders including government agencies, prime contractors, commercial vendors, and internal teams to define and implement robust cybersecurity measures across complex systems. You will facilitate the definition of security objectives, develop system security requirements and verification methods, and support mission-critical engineering decisions by providing a cybersecurity-informed perspective. Your work will ensure that security objectives, protection needs, assurance requirements, and risk management strategies are clearly defined, implemented, and validated.
This is a fulltime position 100% onsite at Buckley SFB (Denver, CO).
What You'll Be Doing<ul><li>
Provide comprehensive cybersecurity systems engineering support to government and contracted personnel in the areas of security controls, configuration management, software security assessments, and ATO package review.</li><li>
Engineer, implement and monitor security measures for the protection of computer systems, networks and information throughout the system development lifecycle.</li><li>
Review and design security architecture for next generation space mission ground systems and provide recommendations on security improvements to the system's baseline.</li><li>
Identify and define system security requirements and develop detailed cybersecurity designs that align with mission objectives.</li><li>
Identify and recommend strategies for mitigation and/or removal of ground and space cybersecurity vulnerabilities.</li><li>
Participate in risk management activities to ensure cybersecurity risks are evaluated and effective mitigations applied in accordance with security directives.</li><li>
Provide cybersecurity expertise in support of critical decision points and provide ground truth assessments of security events/activities and posture.</li><li>
Review cybersecurity test procedures for requirements satisfaction, including participation in Test Readiness Review activities and witnessing of test events.</li></ul>
What You Need to be Successful
Minimum Requirements for the Senior Engineering Specialist - Cyber Security Architecture and Information Systems Security<ul><li>
Bachelor's degree in STEM or in Information Security/Technology, Computer Science, Systems Engineering, Cybersecurity, or related subject area.</li><li>
12 or more years of system security experience across multiple cybersecurity domains (applications security, defensive cyber operations, vulnerability analysis, reverse engineering, network security, embedded systems security) with proven track record of delivering mission-critical security solutions.</li><li>
Demonstrated experience leading cybersecurity teams and programs, with the ability to analyze complex problems and deliver effective solutions in high pressure environments that directly impact mission success.</li></ul><ul><li>
Experience defining and analyzing threat/vulnerability likelihood, coupled with mission impact, to determine risk.</li><li>
Willing to travel occasionally to work location or customer site approx. 20% of the time if required.</li><li>
This position requires ability to obtain and maintain a security clearance, which is issued by the U.S. government. U.S. citizenship is required to obtain a security clearance.</li></ul>
How You Can Stand Out
It would be impressive if you have one or more of these:<ul><li>
Advanced degree in Computer Science, Cybersecurity, Systems Engineering, or Software Engineering.</li><li>
Multiple cybersecurity certification (CISSP, CISSP-ISSAP, CISSP-ISSEP, C|EH, SANS, etc.)</li><li>
Understanding of satellite system design and technology along with the challenges associated with securing them.</li><li>
Experience with Defensive Cyberspace Operations (DCO) planning and implementation.</li><li>
Experience with various cloud offerings and services (AWS, Azure, VMWare, and other relevant technologies).</li><li>
Experience developing technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.</li><li>
Current and active TS/SCI clearance</li></ul>
We offer a competitive compensation package where you&rsquo;ll be rewarded based on your performance and recognized for the value you bring to our business. The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge and skills.
(Min - Max)
$166,400.00 - $249,600.00
Pay Basis: Annual
Leadership Competencies
Our leadership philosophy is simple: every employee, regardless of level and role, can demonstrate leadership. At Aerospace, our commitment is our people. To cultivate our talent and ensure that we have a strong pipeline of future leaders, we want individuals who:<ul><li>
Operate Strategically</li><li>
Lead Change</li><li>
Engage with Impact</li><li>
Foster Innovation</li><li>
Deliver Results</li></ul>
Ways We Reward Our Employees
During your interview process, our team will provide details of our industry-leading benefits.
Benefits vary and are applicable based on Job Type. A few highlights include:<ul><li>
Comprehensive health care and wellness plans</li><li>
Paid holidays, sick time, and vacation</li><li>
Standard and alternate work schedules, including telework options</li><li>
401(k) Plan &mdash; Employees receive a total company-paid benefit of 8%, 10%, or 12% of eligible compensation based on years of service and matching contributions; employees are immediately eligible and vested in the plan upon hire</li><li>
Flexible spending accounts</li><li>
Variable pay program for exceptional contributions</li><li>
Relocation assistance</li><li>
Professional growth and development programs to help advance your career</li><li>
Education assistance programs</li><li>
An inclusive work environment built on teamwork, flexibility, and respect</li></ul>
We are all unique, from various backgrounds and all walks of life, yet one thing bonds all of us to each other&mdash;the belief that we can make a difference. This core belief empowers us to do our best work at The Aerospace Corporation.
Equal Opportunity Commitment
The Aerospace Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, age, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender, gender identity or expression, color, religion, genetic information, marital status, ancestry, national origin, protected veteran status, physical disability, medical condition, mental disability, or disability status and any other characteristic protected by state or federal law. If you&rsquo;re an individual with a disability or a disabled veteran who needs assistance using our online job search and application tools or need reasonable accommodation to complete the job application process, please contact us by phone at 310.336.5432 or by email at peoplemangmnt.mailbox@aero.org . You can also review Know Your Rights: Workplace Discrimination is Illegal.</div>

Cyber Mission Engineer

Boeing

<div>Tukwila, Washington
Job ID JR2026508422 Category Security &amp; Fire Protection Services Role Type Onsite Post Date May 08, 2026<div> 
</div><div>Job Description
At Boeing, we innovate and collaborate to make the world a better place. We&rsquo;re committed to fostering an environment for every teammate that&rsquo;s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.
The Boeing Company is looking for an Associate Industrial Security Specialist to join the team in Tukwila, WA.
Boeing is seeking an experienced Industrial Security Specialist that will execute Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements.
Position Responsibilities:<ul><li>
Assists with Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements</li><li>
Identifies deficiencies and recommends corrective action</li><li>
Assists with Administrative Inquiries (e.g., collects and analyzes data, writes reports and interviews) on personnel, processes and situations to determine level and scope of non-compliance with government and company regulations/requirements</li><li>
Assists with Communication Security (COMSEC) duties and responsibilities (including inventory, distribution and destruction)</li><li>
Assists in the protection of government, intellectual, third party and company information from unauthorized disclosures</li><li>
Develops, implements and administers an Operational Security program, security education, procedures and physical controls to ensure compliance with government and company regulations/requirements on less complex programs</li><li>
Performs Personnel Security processes to assist in obtaining individual security clearances/accesses</li><li>
Assists in developing and conducting security awareness training and education program to educate, refresh, and motivate personnel to protect people, property and information</li><li>
Assists in Physical Security duties and responsibilities within Boeing facilities (e.g., complete fixed/closed facility checklists/survey areas, review and approve facility drawings for new or remodeled classified areas) to ensure compliance with company and government regulations/requirements</li><li>
Assists in sub-contractor management to ensure compliance with government regulations/requirements</li></ul>
Basic Qualifications (Required Skills/Experience):<ul><li>
Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years</li><li>
Experience with Industrial Security</li><li>
Experience working with cross-functional or cross-organizational teams to develop and implement plans, schedules, or solutions</li></ul>
Preferred Qualifications (Desired Skills/Experience):<ul><li>
Bachelor&rsquo;s degree or higher</li><li>
1+ years of experience in Industrial Security</li></ul>
Conflict Of Interest:
Successful Candidates for this job must satisfy the Company&rsquo;s Conflict Of Interest (COI) assessment process.
Drug Free Workplace:
Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.
Pay &amp; Benefits:
At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.
The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.
Pay is based upon candidate experience and qualifications, as well as market and business considerations.
Summary pay range: $69,700 - $94,300 

Applications for this position will be accepted until May. 18, 2026 

Export Control Requirements:
This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a &ldquo;U.S. Person&rdquo; as defined by 22 C.F.R. &sect;120.62 is required. &ldquo;U.S. Person&rdquo; includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.
Export Control Details:
US based job, US Person required
Relocation
Relocation assistance is not a negotiable benefit for this position.
Security Clearance
This position requires an active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
Visa Sponsorship
Employer will not sponsor applicants for employment visa status.
Shift
This position is for 1st shift 

Equal Opportunity Employer:
Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.</div></div>
 <div><h2 class="jobSectionHeader">Your Benefits</h2>
No matter where you are in life, our benefits help prepare you for the present and the future.
<ul><li><div>Generous company match to your 401(k).</div></li>
<li><div>Industry-leading tuition assistance program pays your institution directly.</div></li>
<li><div>Fertility, adoption, and surrogacy benefits.</div></li>
<li><div>Up to $10,000 gift match when you support your favorite nonprofit organizations.</div></li></ul> 

These programs are subject to eligibility requirements and other conditions, which may differ for employees of certain subsidiaries or business units, or union-represented employees depending on bargaining agreement terms. If this information conflicts with the program documents, the latter shall control. This material is informational only.</div>

Associate Industrial Security Specialist

Booz Allen Hamilton

<div>Information System Security Officer
The Opportunity:
We&rsquo;re looking for an Information System Security Officer (ISSO) who can create solutions for the government that will withstand even the most advanced cyber threats. As an ISSO at Booz Allen, you&rsquo;ll detect, evaluate, and document the security configuration of developmental and operational tools and security impacts, and make improvement recommendations. You&rsquo;ll coordinate work with in-house teams, subcontractors, and vendors to identify the right mix of tools and techniques to translate your customers&rsquo; IT needs and future goals into a plan that will enable secure and effective solutions. We need to come up with the best solutions, so you&rsquo;ll investigate new techniques, break free from the legacy model, and go where the industry is going. You&rsquo;ll lead the team through a critical approach to network design, providing alternatives and customizing solutions to maintain a balance of security and mission needs.
As an ISSO on our team, you&rsquo;ll advise the client, lead the discovery of their cyber risks, understand applicable policies, and develop a mitigation plan. You&rsquo;ll oversee the analysis of technical, environmental, and personnel details from technical subject matter experts and engineers as your team reviews the entire threat landscape. Then, you&rsquo;ll guide your client through a plan of action with presentations, whitepapers, and milestones. Your client will rely on you to translate security concepts, so they can make the best decisions to secure their mission-critical systems. This is your opportunity to take a leadership role in information security while sharing your skills in cloud technologies with both clients and your team. Be a part of our team as we protect our nation's critical information systems.
Join us. The world can&rsquo;t wait.
You Have:<ul><li>
3+ years of experience as an ISSO or Information System Security Analyst (ISSA)</li><li>
Experience conducting tools assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements</li><li>
Experience with the implementation, oversight, and maintenance of security configuration, practices, and procedures for systems</li><li>
Experience implementing controls from NIST 800-53, FedRAMP, ICD 503, RMF, and DoD Information Levels, including applying them to the design and implementation of information technology solutions to achieve an authorization to operate (ATO)</li><li>
Experience with eMASS or Xacta IA Manager</li><li>
Ability to perform risk analysis</li><li>
Active TS/SCI clearance; willingness to take a polygraph exam</li><li>
HS diploma or GED and 12+ years of experience supporting IT projects and activities, Associate&rsquo;s degree and 10+ years of experience supporting IT projects and activities, Bachelor&rsquo;s degree and 8+ years of experience supporting IT projects and activities, or Master&rsquo;s degree and 6+ years of experience supporting IT projects and activities</li><li>
DoD 8570 IAT Level II Certification such as CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP Certification</li><li>
Ability to obtain a DoD 8570.01-M CSSP Infrastructure Support Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date</li></ul>
Nice If You Have:<ul><li>
Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool</li><li>
Experience assessing configuration changes such as new COTS tools or web application upgrades to the system security boundary</li><li>
Experience drafting tool implementation CONOPS and reviewing tool or capabilities topologies, CONOPS, and vulnerability scans to assess risk</li><li>
Experience with cyber-related tools such as Ansible, Terraform, Splunk, or STIG Viewer</li><li>
Knowledge of cloud-native security tools, including HBSS</li><li>
Knowledge of Zero Trust principles and concepts</li><li>
Ability to plan and conduct security authorization reviews and assurance case development for the initial installation of systems and networks</li><li>
Ability to work within a collaborative team, and a fast-paced and dynamic environment</li><li>
Possession of excellent written, organizational, presentation, and verbal communication skills</li><li>
AWS, Azure, or GCP Certification</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Information System Security Officer

NMC Health plc

<div>Actively monitor the networks, systems, applications, IT assets and bio-medical equipment&rsquo;s for suspicious activity and threats. Using offensive and defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or may occur within the network and make the initial decision on the event/ threat severity.</div>
 <div><ul><li>Manage network, intrusion detection and prevention systems.
</li><li>Conduct periodic compromise assessments across selected networks and propose recommendations based on assessment results.
</li><li>Conduct physical security assessment of the organization&rsquo;s systems, including servers and networks, ensuring that any unauthorized external physical interference is not actually possible.
</li><li>Conduct ongoing network hunt activities.
</li><li>Conduct proactive vulnerability assessment across the network, subnetworks and service traffic to identify potential points of intrusion.
</li><li>Research and develop methods of tracking and detecting malicious activity within a network.
</li><li>Develop tools, signatures, and methods of detection for use in incident response activities.
</li><li>Develop SIEM integrations, dashboards, and analytics to illuminate and visualize threat activity.
</li><li>Analyze network traffic to provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.
</li><li>Uses data collected from a variety of cyber defense tools (e.g., anti-virus, IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments, perform cyber defense trend analysis and reporting, and perform event correlation to mitigate threats and gain situational awareness and determine the effectiveness of an observed attack.
</li><li>Carries out triage to ensure that a genuine security incident is occurring.
</li><li>Coordinate with entity-wide cyber defense staff to validate network alerts.
</li><li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event&rsquo;s history, status, and potential impact for further action in accordance with the organization&rsquo;s cyber incident response plan.
</li><li>Document and escalate incidents (including event&rsquo;s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
</li><li>Provide daily summary reports of network events and activity relevant to cyber defense practices.
</li><li>Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
</li><li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.
</li><li>Isolate and remove malware.
</li><li>Develop content for cyber defense tools use them for continual monitoring and analysis of network activity to identify malicious activity.
</li><li>Assist in the construction of signatures which can be implemented on cyber defense tools in response to new or observed threats within the network environment.
</li><li>Analyze and report organizational security posture trends.
</li><li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus, Threat Intelligence Providers) to maintain updated of cyber defense threat condition and determine which security issues may have an impact on the enterprise.
</li><li>Provides cybersecurity recommendations based on significant threats and vulnerabilities.
</li><li>Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operational Plans.
</li><li>Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) and use discovered data to enable mitigation of potential cyber incidents within the enterprise.
</li><li>Use specialized equipment and techniques to catalog, document, extract, collect, package, and preserve digital evidence.
</li></ul>Utilize deployable forensics toolkit to support operations as necessary</div>
 <div>Knowledge
<ul><li>Security concepts such as cyber-attacks and techniques, threat vectors, risk and threat management, incident management etc.
</li><li>Networking concepts and protocols, and network security attacks, vulnerabilities, processes, methodologies, access control mechanisms, traffic analysis methods.
</li><li>Cyber threats and vulnerabilities and information dissemination sources (e.g., alerts and advisories).
</li><li>Cyber defense and vulnerability assessment tools and their capabilities.
</li><li>System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
</li><li>Scripting languages (e.g., Python, Perl, Bash) used in an incident response environment
</li><li>Incident response and handling methodologies.
</li><li>Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools, applications, methodologies and techniques for detecting host and network-based intrusions.
</li><li>Threat investigations, reporting and investigative tools.
</li><li>Cyber defense and information security policies, procedures, and regulations.
</li><li>Common attack vectors, the different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks) and attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
</li><li>Cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored), and attackers&rsquo; methodologies.
</li><li>Signature implementation impact for viruses, malware, and attacks.
</li><li>Windows/Unix ports and services.
</li><li>Relevant laws, legal authorities, restrictions, and regulations pertaining to cyber defense activities.
</li><li>Packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
</li><li>Use of sub-netting tools.
</li><li>Penetration testing principles, tools, and techniques.
</li><li>Investigation, auditing and forensics methods, processes, procedures and standards.
</li><li>Different types of hardware, storage, imaging and file system analysis.
</li><li>Data backup and recovery.
</li></ul>Skills
<ul><li>Using SIEM/SOAR and Vulnerability Management tools and services.
</li><li>Sysadmin skills (Linux/Mac/Windows).
</li><li>Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, and more).
</li><li>Identifying, analyzing and interpreting trends or patterns in complex data sets.
</li><li>Developing and deploying signatures.
</li><li>Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
</li><li>Using incident handling methodologies.
</li><li>Collecting data from a variety of cyber defense resources.
</li><li>Recognizing and categorizing types of vulnerabilities and associated attacks.
</li><li>Performing packet-level analysis.
</li><li>Conducting trend analysis.
</li><li>Using cyber defense reporting structure and processes.
</li><li>Utilizing a combination of automated and manual testing methods.
</li><li>Developing automated vulnerability testing scripts and using off the shelf vulnerability testing tools.
</li><li>Conducting vulnerability scans and recognizing vulnerabilities in networks, systems and applications.
</li><li>Using of penetration testing tools and techniques.
</li><li>Applying analytical and problem-solving skills.
</li></ul>Ability
<ul><li>Collaborate with other sections across the department to enhance detection capabilities.
</li><li>Perform Malware analysis.
</li><li>Work closely with management to respond appropriately to the results of assessments and mitigation oversight of found vulnerabilities.
</li><li>Perform data analysis, correlation, and analytics leveraging Security Information and Event Management (SIEM) tools.
</li><li>Conduct vulnerability scans and recognize vulnerabilities in security systems &amp; devices.
</li><li>Accurately and completely source all data used in intelligence, assessment and/or planning products.
</li><li>Apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
</li><li>Interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute).
</li><li>Prepare and create regular reports to document any security breaches/ incidents.
</li><li>Provide forensic support to Cyber Security Operations during the investigation of any detected threat or contained incident / event to determine root cause and propose response recommendations as required.
</li></ul>Education and Certification
<ul><li>Bachelor&rsquo;s degree in an information technology, computer science, cyber security or equivalent work experience.
</li><li>CompTIA Security+
</li><li>CISSP: Certified Information Systems Security Professional
</li><li>GCFA: GIAC Certified Forensic Analyst
</li><li>GCIH: GIAC Certified Incident Handler
</li><li>GCIA: GIAC Certified Intrusion Analyst
</li><li>OSCP: Offensive Security Certified Professional
</li><li>CEH: Certified Ethical Hacker
</li><li>CPT: Certified Penetration Tester
</li></ul>Experience
<ul><li>3 years of experience in cyber security operations with expertise in managing the Security Operations Center
</li><li>UAE experience preferred.</li></ul></div>

Information Security Specialist

<div>SMX is seeking an Information System Security Manger (ISSM &ndash; SIGINT) who will be tasked with managing and maintaining the security posture of SIGINT systems in accordance with the standards established by the National Security Agency (NSA), Department of Defense (DoD), and Intelligence Community (IC). This role involves continuous monitoring, management of security controls, validation of risk management documentation, and ensuring the prompt resolution of Plan of Action &amp; Milestones (POA&amp;M) items. The ISSM&ndash;SIGINT collaborates closely with stakeholders to ensure system compliance, supports incident reporting and response efforts, and offers guidance to other ISSOs on policies and procedures. This senior position demands technical expertise, leadership skills, and a comprehensive understanding of NSA security frameworks, processes, and tools.

This is a full-time onsite position in Ft. Belvoir, VA.

Essential Duties &amp; Responsibilities

Continuous Monitoring and System Management
<ul>
<li>Implement ongoing monitoring activities to ensure adherence to NSA standards and timelines (120-100 days of ATD).</li>
<li>Validate and refresh self-test security controls, diagrams, hardware and software inventories, and security scans in CyborgBunny.</li>
<li>Ensure that RMF documents (e.g., Incident Response, Contingency, Configuration, and Disaster Recovery Plans) are updated every 12 to 18 months.</li>
<li>Monitor and review User Activity Monitoring (UAM) activities through SEAR, ensuring that System Security Plans (SSPs) and CONOPS are updated annually.</li>
<li>Address discrepancies in the IGGY system and prepare readiness reports for review by the DAO.</li>
</ul>
POA&amp;M and Vulnerability Management
<ul>
<li>Track, update, and resolve POA&amp;Ms to ensure compliance with NSA and IC policies.</li>
<li>Manage extension requests for expiring POA&amp;Ms and systems requiring DAO decisions.</li>
<li>Collaborate with ISSOs to confirm that expired POA&amp;Ms are either resolved or extended, with DAO approval.</li>
</ul>
Incident Response and Alert Management
<ul>
<li>Respond to Computer Security Incident Reports (CSIRs) through FREEZFRAME or email within three business days and follow up weekly while escalating any unresolved cases.</li>
<li>Review alerts in LATTEART and collaborate with ISSOs to address system health scores in accordance with NSA requirements.</li>
</ul>
System Approvals and Decommissioning
<ul>
<li>Review and approve IAVA POA&amp;M items, Staffing Processing Forms (SPFs), CIVET tickets, and DTA ticket requests for systems lacking an O-ISSM.</li>
<li>Manage decommission requests in XACTA and ensure that extensions are thoroughly documented.</li>
</ul>
Policy Guidance and Collaboration
<ul>
<li>Offer guidance to ISSOs regarding policy, procedures, and updates to NSA standards.</li>
<li>Assist system owners and ISSOs in maintaining compliance with mandatory training, iAgree forms, and other security requirements.</li>
</ul>
Stakeholder Communication and Reporting
<ul>
<li>Maintain communication with System Owners, ISSOs, and DAOs to ensure system readiness and compliance.</li>
<li>Participate in meetings, fulfill ad hoc tasks, and provide written status reports as needed.</li>
<li>Review the DARKROAST, ROCBLASTER, XACTA, NESBER and other related systems for inquiries related to newly registered systems or assets.</li>
</ul>
Automation and Process Optimization
<ul>
<li>Identify and evaluate solutions for automating cybersecurity analysis tasks to enhance efficiency and accuracy.</li>
</ul>
Required Skills, Experience &amp; Education
<ul>
<li>Active TS security clearance and eligible for SCI and NATO read-on prior to starting work. Complete an active CI polygraph before commencing work.</li>
<li>PhD in Science, Technology, Engineering, or Mathematics (STEM) with over 15 years of experience in cybersecurity; a Master's degree in STEM with over 18 years of cybersecurity experience; or a Bachelor's degree in STEM with at least 20 years of experience in cybersecurity.</li>
<li>Capacity to obtain and maintain all required NSA access.</li>
<li>CISM or CISSO or FITSP-M or GCIA or GCSA or GCIH or GSLC or GICSP or CISSP-ISSMP or CISSP</li>
<li>Fifteen years of experience in assessment and accreditation activities for national security systems (NSS).</li>
<li>Ten years of experience in validating system security controls.</li>
<li>Ten years of experience managing vulnerabilities.</li>
<li>Eight years of experience implementing RMF.</li>
<li>Five years of experience in POA&amp;M tracking and resolution.</li>
<li>Three years of experience in continuous monitoring of system security controls.</li>
</ul>
Key Competencies:
<ul>
<li>Technical Expertise: Proficient in NSA-specific tools and processes such as CyborgBunny, Biscotti, SEAR, and XACTA.</li>
<li>Risk Management: Demonstrated ability to track and resolve POA&amp;M items and assess risks associated with national security systems.</li>
<li>Communication and Reporting: Excellent written and verbal communication skills for stakeholder engagement, incident reporting, and system readiness updates.</li>
<li>Leadership and Guidance: Strong ability to mentor and support ISSOs in implementing cybersecurity policies and procedures.</li>
<li>Problem-Solving: Expertise in resolving system discrepancies and escalating unresolved incidents efficiently.</li>
<li>Collaboration: Works effectively with system owners, ISSOs, DAOs, and other stakeholders to maintain system compliance and readiness.</li>
<li>Attention to Detail: Meticulous in tracking, documenting, and reporting security activities to ensure compliance with NSA and IC standards.</li>
<li>Adaptability: Capable of staying current with evolving NSA standards, tools, and cybersecurity threats.</li>
</ul>
Desired Skills/Experience/Certifications
<ul>
<li>5 years of experience performing RMF functions under NSA guidance.</li>
<li>5 years of ISSM or ISSO experience using XACTA.</li>
<li>Experience with NSA-specific tools such as Biscotti, SEAR, IGGY, and LATTEART.</li>
<li>Certified Authorization Professional (CAP)</li>
<li>Certified Information Security Manager (CISM)</li></ul> 


Application Deadline: July 13, 2026

#CJPOST

#LI-onsite<div> 

At SMX&reg;, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.

We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what's possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.

SMX is an Equal Opportunity employer including disabilities and veterans.

<div></div>Selected applicant may be subject to a background investigation and/or education verification.

SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).</div></div>

Information System Security Manager (SIGINT) (5268) (TS/SCI CI Poly) (Ft. Belvoir, VA )

Search 10000+ Information systems security specialist jobs near you this May. New roles added regularly across leading industries. Apply today.