FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.
Overview of position:
FEDITC is seeking a Senior Automation Security Specialist to work remotely. A United States Citizenship, EOD eligibility, and an active Secret DoD Security Clearance is required to be considered for this position.
Responsibilities:
- Tool Integration and Automation:
- Architect and implement Power Automate workflows to streamline the RMF compliance process, ensuring a significant reduction in manual effort and increased accuracy.
- Seamlessly integrate and synchronize cybersecurity tools such as Splunk, Qumlos, Axonius, and Tenable with enterprise platforms like ServiceNow, SharePoint, and MS Teams, establishing a unified and efficient cybersecurity environment.
- Design and maintain a robust data aggregation and normalization system, ensuring seamless compliance checks and insightful reporting.
- Compliance Automation:
- Champion the automation of security data collection and analysis to ensure meticulous NIST RMF ATO compliance.
- Innovate and develop scripts and tools for regular and thorough security scans and assessments, proactively identifying vulnerabilities.
- Curate visual dashboards and comprehensive reports in Splunk and similar platforms to continuously monitor compliance status and highlight potential areas of concern.
- Risk Assessment and Management:
- Utilize automated tools for comprehensive asset inventory management, ensuring a complete overview of organizational assets and identification of security gaps.
- Automate and enhance the risk assessment process by integrating diverse data sources and applying relevant NIST controls, streamlining the RMF documentation process.
- Continuous Monitoring and Improvement:
- Develop and implement cutting-edge continuous monitoring strategies for prompt detection and response to security incidents.
- Foster a culture of continuous improvement by regularly reviewing and refining automation processes to adapt to the evolving cybersecurity landscape.
- Training and Knowledge Transfer:
- Orchestrate the development and delivery of comprehensive training materials and sessions, empowering security control assessors with the knowledge to effectively utilize automated tools and interpret results.
- Document automation processes meticulously and create user-friendly guides to ensure consistent application of tools and methodologies.
- Quality Assurance and Performance Tracking:
- Embed rigorous quality control measures within automation processes, ensuring the integrity and reliability of data and compliance assessments.
- Formulate and track key metrics and KPIs to monitor the performance of automated processes and the overall efficacy of the cybersecurity auditing function.
- Collaboration and Communication:
- Foster a collaborative environment with security control assessors, IT staff, and stakeholders, integrating feedback into the automation process and ensuring alignment with organizational goals.
- Translate complex technical information into accessible language for non-technical audiences, effectively communicating the strategic benefits of automation.
- Policy and Procedure Development:
- Contribute strategically to the development and updating of policies and procedures related to automation in cybersecurity auditing.
- Certify that all automated processes are compliant with DHS 4300a and other relevant standards and guidelines, ensuring organizational alignment and integrity.
Experience/Skills:
- 8+ years of experience in technology, automation, and cybersecurity.
- Advanced proficiency in a subset of: Splunk, Tenable (Nessus), Axonius, Qumlos, ServiceNow, SharePoint, MS Teams, Power Automate, Python.
Work Environment:
- Remote with core hours from 8 AM to 4 PM EST (flexible); no travel required.
- Integrated within the MS Office 365 ecosystem.
Performance Metrics:
- Measurable reduction in RMF compliance process time and errors.
- Enhanced accuracy and efficiency in risk assessment and cybersecurity monitoring.
- Strengthened team collaboration and knowledge sharing, evidenced by effective training outcomes and comprehensive documentation.
Clearance:
- Eligibility for DHS EOD and Secret clearance.
- Must be a US Citizen and pass a background check.
- Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).
FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran. FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates
Job Types: Full-time, Contract
Pay: $100,000.00 - $120,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Flexible spending account
- Health insurance
- Health savings account
- Life insurance
- Paid time off
- Referral program
- Vision insurance
Schedule:
- 8 hour shift
- Day shift
- Monday to Friday
Application Question(s):
- Do you have experience with Power Automate?
Experience:
- Splunk: 3 years (Required)
- Tenable Security Center: 3 years (Preferred)
- Build automation: 3 years (Required)
- Test automation: 3 years (Required)
Security clearance:
Work Location: Remote