Information Security Specialist - Patch Management

- Oversee the Computer Network Defense-Service Provider (CNDSP) - Collaborate with system owners to efficiently address IAVMs/ICVMs and manage Plan of Action and Milestones (POA&Ms) in line with DoD directives - Implement Defense in Depth strategies within security engineering designs - Conduct analysis on existing and future systems, assessing security architectures and formulating engineering solutions that incorporate information security needs - Execute security risk assessment methods during system development, including network penetration testing, antivirus management, and risk analysis - Engage in Computer Incident Response Team (CIRT) activities, including forensic evaluations - Design and implement network defense measures such as antivirus, anti-spam, and intrusion detection/prevention systems - Review information assurance security events and logs using advanced security information/event management tools - Plan and oversee a comprehensive Defense In Depth strategy encompassing scanning, remediation, intrusion detection/prevention, firewalls, proxy servers, and more - Evaluate and mitigate security threats and risks throughout the program lifecycle - Validate system security requirements and approve System Security Plans for enterprise-wide systems - Manage the agencys public key infrastructure systems and contribute to DoD PKI services - Handle the procurement, installation, and accountability of system PKI certificates and provide technical support - Conduct certification and accreditation assessments and support Automated Information System Accreditation - Perform comprehensive Security Risk Assessments, analyzing vulnerabilities and ensuring compliance with security measures