Cybersecurity Support Engineer - Chantilly

As a Cybersecurity Support Services Engineer, I am looking for someone to perform essential cybersecurity hygiene and compliance tasks across a diverse portfolio, including Windows and Linux-based Client-Server implementations in On-Prem, VMware virtualization, and AWS and Azure cloud environments. The CSSE position plays a vital role in establishing and maintaining the overall security posture of systems, which encompasses identifying remediation actions for vulnerabilities and compliance issues in operating systems and application software. This includes ongoing vendor patch releases and the testing and validation of baseline system configurations for compliance with Security and Technical Implementation Guides (STIGs) as well as customer-specific configuration and policy requirements. Key responsibilities include: - Vulnerability and Compliance Remediation: - Establish, update, and maintain automated patching services (e.g., WSUS, Satellite, Ansible) for deployed technology baselines. - Implement patches and configuration updates to address findings noted from various sources (e.g., security scans, IAVM processes (IAVA/IAVB), Cyber Task Orders) within specified timeframes. - Testing and Validation: - Document and conduct test activities to validate system changes (e.g., patch updates, system upgrades) to ensure that security posture remains intact. - Draft and present test reports capturing relevant information. - Provide recommendations for security control implementation and identify necessary countermeasures or mitigation controls. - Respond to and manage communications regarding queries and requests for security information and reports. - Incident Response & Security Oversight: - Support and coordinate investigations of security incidents and report findings as necessary. - Guide and coordinate communication, execution, and enforcement of security policies and plans for data, applications, hardware, and telecommunications systems. - Advise stakeholders on information assurance standards, dependencies, and emerging security technologies.