Job description

M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people, skills, clearance levels, and technologies to help organizations that desire improved performance and modern, sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include IT Talent Solutions, Data Delivery & Analytics, Cyber Security, Cloud Migration, Applications and Infrastructure, Software Development, and Finance & Accounting. M9 Solutions is seeking a Cybersecurity Specialist 2 to work on-site in support of a government contract for a client located in Charleston, SC . An active Public Trust clearance is required. Responsibilities Works closely with and supports team members, vendors, and government customers. Implements Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems. Assists in the development and verification of documentation necessary to complete the RMF assessment and authorization process. Conducts ICS/SCADA system inventories following government guidance. Conducts vulnerability scanning and documents system vulnerabilities. Supports ISO standardization and quality inspections. Participates in continuous improvement of organizational cybersecurity posture. Coordinates and implements technical controls and configuration settings as part of a multidisciplinary team. Required Skills and Qualifications Ability to obtain a Public Trust security clearance. 0+ years of experience with a Master's degree in Information Technology, Risk Management, or Cybersecurity; or 2+ years of experience with a Bachelor's degree in Information Technology, Risk Management, or Cybersecurity; or 6+ years of experience with an Associate's degree in Information Technology, Risk Management, or Cybersecurity; or 8+ years of experience with a High School diploma. U.S. citizenship is required for this role. One of the following certifications: CASP CE, CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, CISA, CISM, GCED, or GCIH. Experience working with industry and government agencies on the design of platforms and integrated systems. Experience working on government and/or commercial projects implementing cybersecurity requirements in a variety of industrial control systems (e.g., building management, electronic security, fire alarm/mass notification, electrical distribution, power management, etc.). Proficiency with ACAS and HBSS and mitigation strategies. Experience developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data. Experience with assessment, mitigation, and closure of network vulnerabilities and vulnerability management in eMASS. Experience establishing, managing, and tracking Plans of Action and Milestones (POA&Ms). Experience applying STIGs to servers, databases, applications, and other hardware using Security Readiness Review (SRR) tools (scripts and ACAS). Ability to identify, maintain, and troubleshoot control network components. Excellent understanding of the RMF lifecycle and NIST 800-53 controls implementation. Awareness of NIST Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security and UFC 4-010-06 Unified Facilities Criteria (UFC) Cybersecurity of Facility. Working knowledge of operational control systems and implementing a variety of security assessment tools. Familiarity with DoDIN CCRI/CCORI and government TASKORDS. Familiarity with various industry products. Strong oral, written, and presentation skills with the ability and experience communicating directly with customers. Demonstrated background working with multidisciplinary teams. Demonstrated time management and organization skills to meet deadlines and quality objectives. Preferred Skills and Qualifications Strong MS Excel, Word, PowerPoint, AutoCAD, Cameo, and Visio skills. Full-Time Employee Compensation M9 Solutions’ pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include, but are not limited to, responsibilities of the position, education, experience, knowledge, skills, abilities, as well as internal equity, location, alignment with market data, applicable bargaining agreement (if any), or other law. M9 Benefits - m9solutions.com Salary Range $60,000 — $180,000 USD M9 Solutions, LLC (M9) is a Federal subcontractor and complies with all applicable federal laws prohibiting discrimination in employment, including Title VII of the Civil Rights Act of 1964 and the Americans with Disabilities Act (ADA). M9 also adheres to the affirmative action requirements of the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA), ensuring equal opportunity for protected veterans. If you wish to voluntarily share that you are an individual with a disability, you are welcome to do so at any point in the application or employment process; M9 does not require this information, and it will not affect your candidacy. If you need accommodation during the application process or encounter difficulties using our website, please contact our Human Resources Department at hr@m9solutions.com or 703-936-0880. M9 Solutions is a proud participant in the Virginia Values Veterans (V3) program and supports the Military Medics and Corpsmen (MMAC) initiative, demonstrating our commitment to hiring and supporting veterans, transitioning service members, military spouses, and dependents. With 15+ years of proven delivery and growth, M9 Solutions is a unique small business with credible past performance and key capabilities offering project management services, solution architects, business analysts, program managers, technical architects, and technical consultants. M9 was recognized as an Inc. 5000 Fastest-Growing Private Companies in 2021, 2020, 2019, 2018, 2017, 2016, and 2012. M9 Solutions believes that work should be fun, rewarding, and something everyone can be excited about. We offer a competitive compensation package and value diverse perspectives in driving the vision of the company.

Requirements

Must-haves

M9 Solutions is seeking a Cybersecurity Specialist 2 to work on-site in support of a government contract for a client located in Charleston, SC . An active Public Trust clearance is required.
Works closely with and supports team members, vendors, and government customers.
Implements Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems.
Assists in the development and verification of documentation necessary to complete the RMF assessment and authorization process.
Conducts ICS/SCADA system inventories following government guidance.
Conducts vulnerability scanning and documents system vulnerabilities.
Supports ISO standardization and quality inspections.
Participates in continuous improvement of organizational cybersecurity posture.
Coordinates and implements technical controls and configuration settings as part of a multidisciplinary team.
Required Skills and Qualifications
Ability to obtain a Public Trust security clearance.
U.S. citizenship is required for this role.
One of the following certifications: CASP CE, CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, CISA, CISM, GCED, or GCIH.
Experience working with industry and government agencies on the design of platforms and integrated systems.
Proficiency with ACAS and HBSS and mitigation strategies.
Experience developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
Experience with assessment, mitigation, and closure of network vulnerabilities and vulnerability management in eMASS.
Experience establishing, managing, and tracking Plans of Action and Milestones (POA&Ms).
Experience applying STIGs to servers, databases, applications, and other hardware using Security Readiness Review (SRR) tools (scripts and ACAS).
Ability to identify, maintain, and troubleshoot control network components.
Excellent understanding of the RMF lifecycle and NIST 800-53 controls implementation.
Awareness of NIST Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security and UFC 4-010-06 Unified Facilities Criteria (UFC) Cybersecurity of Facility.
Working knowledge of operational control systems and implementing a variety of security assessment tools.

Nice-to-haves

Preferred Skills and Qualifications

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

accessibility

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Vision