Foxhole Technology · 2 months ago
Lead Security Auditor
Foxhole Technology is a recognized leader in providing cybersecurity and IT support capabilities for federal civilian and defense agencies. They are seeking a mission-focused Lead Security Auditor to lead a team providing cyber compliance reporting and general cyber support to the organization.
Information Technology
Responsibilities
Support the coordination of DoD, DHS, and/or OIG Compliance Inspections associated with IA activities to include but not limited to RSI, Computer Security Service Provider (CSSP), or other required inspections. Support services includes but is not limited to process documentation, inspection coordination, collection, and analysis of pre and post inspection deliverables and direct assistance/training to field units undergoing inspection
Support the processing, tracking, and reporting requirements of DoD/DISA IAVM and DHS Information Security Vulnerability Management (ISVM) program utilizing existing processes and procedures to include development and improvement of the processes to meet emerging DoD and DHS requirements
Track and report the compliance statistics of vulnerabilities on assets in the Assured Compliance Assessment Solution (ACAS), Tanium, and Continuum portals and maintain asset management within the prescribed tools
Provide focused reporting on vulnerabilities when required by higher authority thru Orders and Directives
Support the management and reporting of Continuous Monitoring (CM) requirements to DHS and DoD utilizing existing and emerging tools
Support the accessing, analyzing, and reporting of vulnerability remediation data from the Host Based Security System (HBSS), Assured Compliance Assessment Solution, (ACAS), and Microsoft System Center Configuration Manager (SCCM) application suites
Support the receipt, acknowledgement, tracking, analysis, and redistribution of DoD and DHS Directives
Support all DoD and DHS FISMA reporting requirements
Qualification
Required
Minimum seven (7) years IT information assurance experience with at least two (2) years leading a section
BS Degree or additional work experience substitution
Experience with tools like ACAS, Tanium, and Endpoint Detections applications
Experience with interpreting, discussing, or presenting findings to stakeholders as required
Possess one of the following certifications: Cisco CCNP Security, CompTIA CASP+, ISACA CISA, ISC2 CISSP
Think analytically
Effective verbal and written communication skills
Make decisions
Observe/remember details
Interpret data
Concentrate on tasks
Adjust to change
Handle stress/emotions
Regular attendance
Maintain work schedule
Attend meetings
Meet deadlines
Keyboard/type
Handle confidential information
Use math/calculations
Stay organized
Operate office equipment
May direct others
May be exposed to dust/dirt, humidity, and noise