Position would require the candidate to be a W2 employee of Donatech.
US Citizenship Required.
Active Secret Clearance Required.
• Support cybersecurity implementation and maintenance for assigned information systems under the guidance of the ISSM or senior ISSOs.
• Process and review data transfer requests, ensuring security controls are applied and authorization requirements are met.
• Assist with user account and access requests, verifying approvals and adherence to role-based access control policies.
• Execute continuous monitoring activities, including reviewing security logs, validating security controls, and identifying anomalies.
• Conduct system auditing and log reviews to detect policy violations, compliance issues, or potential security events.
• Develop, maintain, and update cybersecurity documentation, security plans, and authorization artifacts to support audit-ready operations.
• Track and assist in closure of Plans of Action and Milestones (POA&Ms) resulting from audits, assessments, or monitoring activities.
• Report identified security issues, audit findings, or system anomalies to the ISSM or senior cybersecurity personnel.
• Collaborate with cross-functional teams (IT, Facilities, Industrial Security) to ensure cybersecurity requirements are applied consistently.
• Support preparation for inspections, audits, and assessments by providing required documentation, evidence, and operational insigh
• Experience collaborating with IT or engineering teams to support investigation and remediation activities.
Qualifications You Must Have
• Active DoD Secret Security Clearance required on day one.
• IAM Level I certification compliant with DoD 8570 / DoD 8140 (e.g., Security+, GSEC, GSLC).
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant experience.
• Experience performing cybersecurity monitoring, detection, and analysis activities in an enterprise or DoD environment.
• Working knowledge of cybersecurity principles, including network security, system logging, access controls, and incident detection.
• Experience analyzing security alerts, logs, and network traffic to identify anomalous or malicious activity.
• Ability to document findings, audit results, and response actions according to established procedures.
• Familiarity with cybersecurity tools such as SIEMs (Splunk preferred), IDS/IPS, endpoint protection, vulnerability scanning, and network monitoring platforms.
• Ability to follow established incident response, escalation, and continuous monitoring procedures.
• Willingness to work collaboratively in a team-based cybersecurity operations environment.
Qualifications We Prefer
• Hands-on experience with SIEM platforms such as Splunk for log analysis, alert triage, and event correlation.
• Exposure to vulnerability scanning tools and review of findings, with basic remediation knowledge.
• Familiarity with DoD or other regulated environments, including RMF, NIST, JSIG, NISPOM, or DAAG guidance.
• Experience supporting inspection, assessment, or audit readiness activities.
• Working knowledge of network protocols, architectures, and common attack techniques.
• Ability to identify trends or recurring issues in security events and communicate findings to senior analysts.
• Experience collaborating with IT, Facilities, or Industrial Security teams to apply cybersecurity requirements consistently.