Principal Technician (Cyber Security)


Norfolk, VA


DEFTEC delivers mission-critical solutions through skillfully delivered services and innovative products. We are inspired by our clients' critical missions and driven to provide the most effective solutions to execute their missions, operational challenges, and requirements. Our dedicated, experienced, and talented employees work closely with our clients to ensure the delivery of exceptional services and products.


POSITION OVERVIEW


DEFTEC Corporation is seeking a Principal Technician (Cyber Security) to support cyber security operations for the NATO Communications and Information Agency (NCIA). This position is located in Norfolk, VA and is on-site, with occasional travel to other NATO locations. The Principal Technician serves as the primary point of contact for endpoint security management, firewall and network monitoring solutions, and vulnerability scan operations, and supports accreditation activities, cyber incident investigations, and the execution of NATO IT security policies. This role demands a hands-on practitioner who can own the vulnerability management cycle end to end, operate independently as an embedded technical advisor within a NATO cyber team, and communicate clearly with both technical teams and non-technical stakeholders.


JOB RESPONSIBILITIES:

• Conduct vulnerability assessments using automated and semi-automated tools, and manage identified vulnerabilities through remediation and closure across supported networks


• Administer and monitor endpoint protection services across multiple security domains


• Manage access controls for firewalls and endpoint security solutions, including firewall rule changes in support of operational requirements


• Support security certificate services in accordance with NATO PKI requirements


• Define and maintain secure system configurations in compliance with intended architectures, organizational policy, and local risk assessments


• Support accreditation activities, making routine accreditation decisions and escalating decisions beyond scope and responsibility level


• Review and perform risk assessments and risk treatment plans, and maintain integrity of records to support and justify decisions


• Support investigations of suspected attacks and security breaches, including cyber incident handling and root cause analysis


• Conduct internal audits and reviews of cyber hygiene and security service delivery for the Agency and supported customers


• Coordinate user access and maintain security checklists and authorization tables


• Carry out routine operational procedures, including execution of specified automation tools and scripts, and monitor and report on infrastructure performance


• Execute NATO IT security policies and standards, and generate status reports for senior management on their implementation


• Prepare and submit monthly status reports documenting activities, hours by service area, and outcomes


• Attend meetings as a technical advisor, working in partnership with stakeholders across supported teams to deliver services with minimal impact to business functions


• Perform other duties as required

Required Qualifications:

• Active NATO SECRET security clearance; must be able to work on-site in Norfolk, VA


• Secondary educational qualification with 3 years post-related experience


• At least 4 years practical experience of implementation and maintenance of cyber security systems within a large organization


• Working experience administering and monitoring cyber security software, including enterprise vulnerability scanning and endpoint protection platforms (or equivalent)


• Detailed knowledge and working experience of security and networking technologies including IPv4, Firewalls, Virtual Private Networks, Proxy Servers, Intrusion Detection, and Forensic tools


• Working experience troubleshooting technical issues and providing technical support to end-users


• Good understanding of cyber security systems and the ability to work independently to solve problems as an embedded contractor within a government or military team


• Strong written and oral communication skills; ability to coordinate across technical and non-technical teams and report status to senior management

Preferred Qualifications:

• Security Professional certification (CEH, GIAC, ISC2, CompTIA Security+, or other relevant certification)


• Knowledge of NATO responsibilities and organization, including ACO and ACT


• Prior experience working in an international environment comprising both military and civilian elements


• Experience supporting PKI/certificate services and system accreditation processes

DEFTEC offers a comprehensive whole-life benefits package that includes medical, dental, vision, holiday, paid time off, 401K with a match, life insurance, short/long-term disability, and educational reimbursement. The DEFTEC team comprises professionals who make a difference daily in crucial national security missions. Our leadership knows that this happens by employing a diverse team that is well cared for. Our top priority is our employees, making DEFTEC an ideal workplace.


Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. Please get in touch with HR@deftec.com if you require reasonable accommodations.


DEFTEC is a Drug-Free Workplace where post-offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria are met as outlined in our policies.


AAP/EEO Statement


DEFTEC Corp is an Equal Opportunity and Affirmative Action Employer and prohibits discrimination and harassment of any type based on actual or perceived race, color, national origin, ancestry, sex (including pregnancy, childbirth, breastfeeding and medical conditions related to pregnancy, childbirth or breastfeeding), gender, gender identity, and gender expression, religious creed, disability (mental and physical) including HIV and AIDS, medical condition (cancer and genetic characteristics), genetic information, age, marital status, civil union status, sexual orientation, military and veteran status, denial of family and medical care leave, arrest record and/or any other characteristic(s) protected by federal, state or local law.


This policy applies to all terms of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, training, compensation, benefits, employee activities, and general treatment during employment.


Other Duties


Please note that this job description is not designed to cover or contain a comprehensive listing of the activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time, with or without notice.