Senior Cyber Enhanced Assessment – Cea – Assessor

Senior Cyber Enhanced Assessment – Cea – Assessor

Requirements

• Typically requires a Bachelor’s Degree or equivalent experience and minimum 5 years prior relevant experience, or an Advanced Degree in a related field and minimum 3 years’ experience.
• IAM Level I certification (Security+ or other)
• Experience with various information system security tools that address vulnerability analysis and mitigation. These include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc.
• Relevant experience in any combination: Cybersecurity, systems security, or system hardening; Security Control Accessor (SCA) with the government or military; Information Technology; Experience with network security and/or systems security, which includes any of the following: architecture, topology, protocols, components, and/or principles; Experience with configuring and/or auditing operating systems; Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA; Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, protocols, security methodologies, software programs, hardware troubleshooting or electronics)

Responsibilities

• Assists with the development and sustainment of ConMon & CEA documentation (e.g., process, instruction, training) and tools. Identifies challenges and suggests opportunities for the CEA Program.
• Conducts ConMon and CEAs. Prepares reports to identify trends and significant discoveries and assists with root cause analysis. Assists in the development of implementation plans to mitigate the risk.
• Provides Cybersecurity support for Self-Inspection events, as needed.
• Intermittent travel to other Raytheon locations (20-30%).

Preferred Qualifications

• Knowledge and capability of writing scripts in PowerShell, BASH, and Splunk Search Processing Language (SPL)
• Familiarity with implementation of Government directives and policies derived from NIST, CNSSI, DoD, or other Government Regulatory compliance standards within a professional industry.
• Experience providing technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal/external Customers, Information Technology (IT).
• Familiarity with large multi-facility networks including complex components, including Windows and Linux environments.
• Experience interpreting, implementing, and assessing DISA STIGs.
• Experience with continuous monitoring and Plans of Actions and Milestones (POA&Ms).