Job Description
Job Description
CONUS
ABOUT THE OPPORTUNITY :
Comtech Systems, Inc (CSI) is looking for Information Assurance Manager (IAM) Level III candidates who will be responsible for ensuring that all enclave IS are functional and secure.
They determine the enclaves’ long term IA systems needs and acquisition requirements to accomplish operational objectives.
They also develop and implement information security standards and procedures through the DoD certification and accreditation process.
Candidates will be expected to work with a spirit of cooperation and must exhibit a tenacious work ethic while possessing the drive and critical thinking to excel in potentially tumultuous conditions.
- Prefer candidates with a valid US passport.
- Must have an active, current Secret Clearance.
ABOUT THE COMPANY :
At our core, Comtech employees are driven by innovation. We are leaders in the advanced global commercial and government communications market.
A career at Comtech enables you to design, develop, produce, and market innovative products, systems, and services for advanced communications solutions.
You will facilitate and enhance the way people, businesses, and governments communicate around the world.
Comtech Systems, Inc (CSI). is a leading provider of mission critical solutions to government and civilian agencies with a focus on C4ISR solutions using any type of network, whether mobile, fixed, static, terrestrial, marine, airborne or in space.
To help our customers combat a growing number of cyber-attacks on their systems, we provide training and certification and vulnerability compliance assessment.
Comtech designs, develops, produces, and markets innovative products, systems, and services for advanced communications solutions.
We are technology leaders in the markets that we serve and conduct our business through Government solutions. Our market segments consist of : Tactical Communications, Space & Component Technology, Mobile Datacom, and Cyber Security Solutions.
PRIMARY DUTIES :
All candidates will perform the following duties :
- Obtain and maintain IA certification appropriate to position in accordance to DoD 8570.01-M.
- Certified as a IAM Level III Network environment (NE) Advanced Computing Environment (CE) level support within 6 months of starting position.
- Understanding of the DOD Risk Management Framework Process (RMF), Certification and Accreditation (C&A) process.
- Knowledge of IA policy, procedures, and structure to develop, implement, and maintain a secure CE.
- Knowledge of how to use the following scanning and security assessment tools : RETINA, Security Readiness Review (SRR) scripts for scanning and reporting, Security Technical Implementation Guide (STIG) compliance, and DISA Gold-Disk, DISA STIG compliance and must be efficient with Yellow Jacket, Q-Tip, Harris Stat, Microsoft Patch Deployment and Log Collector.
- Monitor the day-to-day operation and institute corrective actions in response to noted anomalies.
- Provide status updates during troubleshooting and confirm the reason for the outage with the designated Government POCs after resolving the problem.
- Function as an integral part of the NOC in any capacity as designated by the supported unit and have broad visibility over the entire network.
- Maintain, perform cybersecurity administration, provide IAVA updates for CISCO routing and switching equipment.
- Manage accounts, network rights, and access to NE systems and equipment.
- Install, configure and troubleshoot Information Assurance solutions in a deployed environment to include : MacAfee EPO Server, Blue Coat SG Proxy, Microsoft WSUS, eEye Retina Scanner.
- Install, test, maintain, and upgrade network operating systems software and hardware to comply with Information Assurance (IA) requirements.
- Implement applicable patches including IAVAs, IAVBs, and TAs for their NE.
- Provide end user support for all IA related applications for the NE.
- Perform IA related customer support functions including installation, configuration, troubleshooting, customer support, and / or training, in response to customer requirements for the NE.
- Analyze patterns of non-compliance and take appropriate administrative or programmatic actions to minimize security risks and insider threats.
- Write and maintain scripts for the NE.
- Examine potential security violations to determine if the NE policy has been breached, assess the impact, and preserve evidence.
- Support, monitor, test, and troubleshoot hardware and software IA problems pertaining to the NE.
- Analyze system performance for potential security problems.
- Assess the performance of IA security controls within the NE.
- Identify IA vulnerabilities resulting from a departure from the implementation plan or that were not apparent during testing.
- Configure, optimize, and test network servers, hubs, routers, and switches to ensure they comply with security policy, procedures, and technical requirements.
- Recommend and schedule IA related repairs in the NE.
- Evaluate potential IA security risks and take appropriate corrective and recovery action.
- Ensure that hardware, software, data, and facility resources are archived, sanitized, or disposed of in a manner consistent with system security plans and requirements.
- Diagnose and resolve IA problems in response to reported incidents.
- Manage and administer the updating of rules and signatures (e.g., Intrusion Detection System (IDS) / Intrusion Prevention System (IPS), anti-virus, and content blacklists) for specialized CND applications.
- Analyze site / enclave CND policies and configurations and evaluate compliance with regulations and enclave directives.
- Recommend and schedule IA related repairs in the network NE.
- Research, evaluate, and provide feedback on problematic IA trends and patterns in customer support requirements.
- Ensure IAT Level I personnel are properly trained.
- Perform system audits to assess security related factors within the NE.
- Develop and implement access control lists on routers, firewalls, and other network devices.
- Install perimeter defense systems including intrusion detection systems, firewalls, grid sensors, etc., and enhance rule sets to block sources of malicious traffic.
- Apply security requirements to an operating system for the NE or CE used in their current position.
- Adhere to Information System (IS) security laws and regulations to support functional operations for the NE.
- Implement response actions in reaction to security incidents.
- Support the design and execution of exercise scenarios.
- Support Security Test and Evaluations (Part of Certification and Accreditation Process).
- Work with other privileged users to jointly solve IA problems.
SKILLS REQUIRED :
All candidates will have the following minimum skills :
- IAM I for a minimum of ten (10) years of management experience or related areas.
- Ability to communicate effectively, both written and verbally with diverse audiences, internally and externally to foster strong teamwork.
- Work well independently or as a member of a team environment.
- Detail-oriented, with strong analytical skills.
EDUCATION / EXPERIENCE REQUIREMENTS :
Preferred Bachelor’s degree in Management or Cyber Security, OR eleven (11) years of recent specialized experience.
- Must be proficient with Microsoft Office.
- Experience in maintaining certifications related to the requirement of the position.
CERTIFICATION REQUIREMENTS :
All candidates will have one (1) of the following required certification(s) :
- Certified Information Security Manager (CISM)
- CISSP (or Associate)
- GIAC Security Leadership Certification (GSLC)
- Certified Chief Information Security Officer (CCISO)
Comtech offers a competitive salary, comprehensive benefits, and flexible paid time off options, for eligible employees :
- Medical, Dental and Vision
- LTD, Supplemental Life insurance and AD&D
- Comprehensive 401k plan
- Vacation accrual of 10 days annually
- Bereavement, Military, and Jury Duty Leave
Comtech Telecommunications Corp. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.