Job Details

Description

MUST POSSESS A SECRET CLEARANCE.

WE USE E-VERIFY TO ELECTRONICALLY CONFIRM THE EMPLOYMENT ELIGIBILITY OF NEWLY HIRED EMPLOYEES.

JOB TYPE: FULL-TIME

COMPETITIVE SALARY, COMPREHENSIVE BENEFITS AND A COMPANY THAT CARES!

AUSGAR Technologies, Inc., an equal opportunity employer, is an established, Service-Disabled Veteran-Owned Small Business (SDVOSB) Department of Defense, government contractor with core competencies in Information Assurance, Cybersecurity and Systems Engineering. With offices on both the East and West coasts, an inviting culture and above-standard benefits, opportunity abounds for the right individual!

Information Technology Auditor/Cybersecurity Analyst — 25-034 - San Diego, CA

As a growing Department of Defense Contractor, AUSGAR Technologies has an exciting opportunity for an Information Technology Auditor/Cybersecurity Analyst to join our team of smart and innovative technical team members in San Diego, California.

Responsibilities

Provide cybersecurity compliance auditing support of unclassified and classified networks and systems to support preparations for CORAs, CCRIs, CSIs, CCORIs, DoD or DoN Inspector General inspections, internal cyber inspections and any other cyber-related inspections conducted internally or by authorized external entities, external government agencies or contractors. Assess and document the cybersecurity posture for applicable training networks and systems. Audit more complex information systems, platforms and operating procedures in accordance with established standards for efficiency, accuracy and security. Evaluate IT infrastructure in terms of risk to the Enterprise and establish controls to mitigate loss. Determine and recommend improvements in current risk management controls and implementation of system changes or upgrades.

• Verify existing systems and networks cybersecurity compliance status.
• Monitor the quality of the vulnerability management of an ever‑changing enterprise network.
• Verify ACAS implementation and operations.
• Analyze ACAS scan results to identify vulnerabilities for recommended immediate remediation.
• Verify IAVM, TASKORD, EXORD and FRAGORD compliance.
• Verify integrity of ACAS discovery scans as required to detect rogue devices.
• Liaise with other divisions to ensure engineered security solutions are IAW DoD policy.
• Develop and present analysis of vulnerability findings.
• Attend and lead working groups to determine compliance requirements.
• Interpret cybersecurity tasking from various sources and determine the best way to implement the guidance in a large enterprise.
• Verify systems and devices configurations and compliance are in accordance with DISA Security Technical Implementation Guides (STIGS), Security Content Automation Protocol (SCAP) and other industry standard assessment methods.
• Ensure the integrity and protection of networks, systems and applications by assessing compliance with Enterprise security policies, through monitoring and analysis of manual and automated data.
• Support the development of compliance assessment briefs.
• Provide guidance and work leadership to less‑experienced technical staff members.
• Interpret results from network/server/application scanning tools, such as Tenable Nessus and Trellix.
• Interpret and implement DISA's Best Practiced Guide (BPG).
• Interpret and implement TASKORD 20-0020 conducting ACAS vulnerability scans.
• Participate in Command Cybersecurity Readiness Inspections (CCRI), Cyber Operational Readiness Assessment (CORA), and Cybersecurity Inspections (CSI).
• Assess Risk Management Framework (RMF) NIST 800‑53 R4 Information Assurance Controls.
• Assess and assist with implementation of countermeasures or mitigating controls.
• Perform periodic and on‑demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance.
• Interpret emerging security, governance and continuous monitoring policies.
• Articulate cybersecurity risk and provide recommendations for remediation/risk acceptance.
• Develop and/or support the successful development of cybersecurity processes and procedures.

Requirements

The physical demands and work environment described here are representative of those that must be met by an employee to successfully perform the essential functions of the job. Reasonable accommodations may be made to individuals with disabilities to perform the essential functions.

Active Secret clearance required.

CompTIA Security+ CE or higher certification required.

Bachelor's degree in Computer Science or a related technical discipline from an accredited college/university required.

Experience with the following required:

• Cybersecurity compliance auditing
• Cyber‑related inspections
• Vulnerability management
• Device configuration and compliance
• Assessment and documentation cybersecurity postures
• Establishment of controls to mitigate loss.
• Determination and recommendation in risk management controls and implementation
• Insider threats
• Security controls

Knowledge of the following required:

• ACAS
• STIGs
• SCAP
• RMF

Knowledge of the Endpoint Security Solutions (ESS) desired.

Ability to travel up to 15%.

Salary Range: $80K - $110K

Based on your qualifications, you will be placed in Level I‑V.

An essential qualification for this position is successfully obtaining a security clearance issued by the Federal Government, which may require successful completion of a background check.

We use E-Verify to electronically confirm the employment eligibility of newly hired employees.

AUSGAR Technologies, Inc. is an equal opportunity employer. If you are a qualified individual with a disability or a disabled veteran and need assistance in completing the application, you have the right to request reasonable accommodation. Please e‑mail us at ...@ausgar.com if you are unable or limited in your ability to use or access www.ausgar.com careers page as a result of your disability.