**Summary** ** Hybrid, must reside in the Washington D.C. area for weekly onsite work. ** Come join a company that strives for _Extraordinary People and Exceptional Performance_ ! **Chenega Services & Federal Solutions, LLC,** a **Chenega Professional Services** ’ company, is looking for a **Cyber Security Specialist** to join our team of IT experts at the Federal Housing Finance Agency's (FHFA) Office of the Chief Information Officer (OCIO). As a member of our cybersecurity team, you will play a key role in developing and implementing robust security architectures for networks, systems, and applications. You will also lead incident response efforts, analyze threat intelligence, and oversee the implementation and management of security monitoring tools. Our company offers employees the opportunity to join a team where there is a robust employee benefits program, management engagement, quality leadership, an atmosphere of teamwork, recognition for performance, and promotion opportunities. We actively strive to channel our highly engaged employee’s knowledge, critical thinking, innovative solutions for our clients. **Responsibilities** + Develop and Design Security Architectures: Create and maintain robust security architectures for networks, systems, and applications to protect against threats and vulnerabilities. + Conduct Threat Assessments and Vulnerability Scans: Perform regular threat assessments and vulnerability scans to identify potential security risks and recommend mitigation strategies. + Lead Incident Response Efforts: Coordinate incident response efforts to address and mitigate security breaches or cyberattacks, including developing and maintaining incident response plans. + Analyze Threat Intelligence: Stay informed about emerging threats by analyzing and interpreting threat intelligence and adjusting security strategies accordingly. + Implement and Manage Security Monitoring Tools: Oversee the implementation and management of security monitoring tools, including SIEM systems, to monitor network and system activity for signs of suspicious behavior and potential security incidents. + Ensure Compliance: Ensure that security measures comply with relevant legal, federal regulatory, and industry standards (e.g., NIST-800, GDPR, HIPAA, PCI-DSS). + Prepare for Audits: Prepare for and assist with audits, ensuring that security controls and practices meet compliance requirements. + Evaluate and Implement Security Tools: Evaluate, implement, and manage security tools and technologies, such as firewalls, intrusion detection/prevention systems, and encryption solutions. + Stay Current with Advancements in Cybersecurity: Stay current with advancements in cybersecurity technologies and recommend updates or new tools as necessary. + Collaborate with IT and Security Teams: Work closely with other IT and security teams to integrate security measures into all aspects of IT operations and development. + Maintain Detailed Documentation: Maintain detailed documentation of security incidents, response actions, security policies, and procedures. + Prepare Reports: Prepare and present regular reports on security status, incidents, and improvements to senior management and stakeholders. + Mentor Junior Staff: Mentor and provide guidance to junior network engineers and IT staff, assisting with their professional development. **Qualifications** + Bachelor's Degree in Computer Science, Cybersecurity, or related field, or equivalent experience as a senior IT professional. + Minimum 5 years of experience in cybersecurity, with a focus on threat assessment, incident response, and security architecture design. + Certifications: CISSP, CISM, CEH, or other relevant certifications in cybersecurity. + Experience with security monitoring tools, including SIEM systems, to monitor network and system activity for signs of suspicious behavior. + Strong understanding of cloud infrastructure, scalability, availability, and disaster recovery principles. _Preferred Qualifications:_ + Master's Degree in Computer Science, Cybersecurity, or related field, or equivalent experience as a senior IT professional. + Experience with threat intelligence platforms to analyze and interpret threat intelligence. + Familiarity with cloud-based security tools and their integration with on-premises infrastructure. + Knowledge of security frameworks (e.g., NIST Cybersecurity Framework, COBIT) and their implementation in IT operations. _Knowledge, Skills and Abilities:_ + Demonstrated ability to work independently and execute on a day to day basis, while employing a hands on approach. + Excellent oral and written communication skills. _Final salary determination based on skill-set, qualifications, and approved funding._ Many of our jobs come with great benefits – Some offerings are dependent upon the role, work schedule, or location, and may include the following: **Paid Time Off** PTO / Vacation – 5.67 hours accrued per pay period / 136 hours accrued annually Paid Holidays - 11 California residents receive an additional 24 hours of sick leave a year **Health & Wellness** Medical Dental Vision Prescription Employee Assistance Program Short- & Long-Term Disability Life and AD&D Insurance **Spending Account** Flexible Spending Account Health Savings Account Health Reimbursement Account Dependent Care Spending Account Commuter Benefits **Retirement** 401k / 401a **Voluntary Benefits** Hospital Indemnity Critical Illness Accident Insurance Pet Insurance Legal Insurance ID Theft Protection **Teleworking Permitted?** Yes **Teleworking Details** Hybrid, must reside in the Washington D.C. area **Estimated Salary/Wage** USD $120,000.00/Yr. Up to USD $158,000.00/Yr. Chenega Corporation and family of companies is an EOE. Equal Opportunity Employer/Veterans/Disabled Native preference under PL 93-638. We participate in the E-Verify Employment Verification Program