Tenant Onboarding Specialist
Indexed description
Responsibilities
- Work collaboratively to plan, implement, manage, monitor, and upgrade information system cybersecurity posture in accordance with NIST 800-53, NIST 800-160 v1 & v2, and NIST 800-207.
- Ensure the organization’s data, infrastructure, and processes are protected by enabling appropriate security controls.
- Conducting regular risk assessments and vulnerability scans to identify potential security gaps and recommend appropriate mitigation strategies.
- Configure and manage compliance scanning and vulnerability tools to perform regular assessments and generate reports.
- Assisting in the development, implementation, and enforcement of information security policies and procedures.
- Research and document network and system vulnerabilities, providing clear and actionable recommendations.
- Participate in security incident response activities, providing technical expertise and support.
- Contribute to the DevSecOps cycle and change management process, ensuring security is integrated throughout the software development lifecycle.
- Effectively communicate security requirements, best practices, and remediation strategies to stakeholders across the organization.
- Bachelor’s Degree or equivalent experience in Computer Science, Information Systems, Engineering, or a related technical discipline.
- Minimum of 2 years of experience in cybersecurity.
- Experience working with cloud environments (AWS, Azure, GCP) including cloud security control mechanisms (AWS IAM, Azure AD).
- Experience working with Commercial and Open-Source security tools, methods, and techniques.
- Experience with DevSecOps, continuous monitoring strategies, and knowledge of Risk Management Framework.
- Basic understanding of industry best practices related to the implementation of cybersecurity tools, information security policy, NIST, and FISMA controls.
- Demonstrated experience researching, analyzing, and applying cybersecurity mitigation strategies to address vulnerabilities.
- Experience working with Department of Defense security standards and tools (e.g., STIGs, SRGs, SCC, CIS).
- US Citizenship and an active Secret security clearance.
- Experience implementing and using vulnerability scanning tools (e.g. Nessus, Tenable.sc, AWS Inspector, etc.).
- Experience implementing and using SIEM tools (e.g., Splunk, Elastic, etc.).
- Experience with various compliance tools, frameworks, and standards used in the DoD (e.g., NIST 800-53 Rev. 4/5, FedRAMP).
- Ability to identify basic coding flaws and apply secure code documentation.
- Knowledge of Software Development models including quality assurance processes.
- Security+ and/or DoD 8570 IAT II-level certification or ability to attain within 6 months of hire.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
Create a free Caio profile to unlock more results and save your role and location preferences.
Unlock free search