Cybersecurity Testing and Evaluation Specialist - Entry to Mid-Level (Maryland)

The National Security Agency (NSA) is seeking a Cybersecurity Testing and Evaluation Specialist to support the protection of its mission systems. The role performs security controls and adversarial testing of applications, systems, networks, and cloud environments, identifies vulnerabilities, assesses cybersecurity solutions, and helps automate testing processes.

What you'll do:

• Conducting security controls testing of NSA systems to ensure controls are properly implemented by system owner(s)
• Conducting testing against cloud fabrics, including various security configuration options of cloud services and a wide variety of different security configurations
• Assessing the effectiveness of security solutions against cybersecurity frameworks (e.g. MITRE Attack Framework)
• Operating within teams focused on implementing and evolving cybersecurity testing procedures and implementing automation to reduce testing time and improve consistent analysis
• Operating within a cybersecurity team for each of the life cycle steps of the Federal Government's Risk Management Framework (RMF), as maintained by the National Institute of Standards and Technology (NIST 800-53)
• Implementing automation across the cybersecurity testing processes

What they're looking for:

• Degree must be in Computer Science (CS) or related field (e.g., Engineering, Mathematics)
• Degrees in Information Technology, Information Systems, Information Security, Networking (Systems Administration), Information Assurance, and Cybersecurity may be considered relevant if the programs contain, at minimum, a concentration of courses in the following foundational CS areas: algorithms; computer architecture (not network architecture); programming methodologies and languages; data structures; logic and computation; and upper-level mathematics
• Relevant experience must be in engineering of computer or information systems over their lifecycle (i.e., requirements analysis, design, development, implementation, testing, integration, deployment/installation, and maintenance), programming, vulnerability analysis, penetration testing, computer forensics, and/or systems engineering
• Completion of military training in a relevant area such as JCAC (Joint Cyber Analysis course) will be considered towards the relevant experience requirement (i.e., 24-week JCAC course will count as 6 months of experience)
• Entry is with a Bachelor's degree and no experience
• An Associate's degree plus 2 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position
• Entry is with a Bachelor's degree plus 3 years of relevant experience or a Master's degree plus 1 year of relevant experience or a Doctoral degree and no experience
• An Associate's degree plus 5 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position
• Cloud Security Knowledge for commercial cloud environments such as Amazon Web Services, Microsoft Azure, Oracle or Google cloud environments
• Knowledge of or experience with penetration testing or ethical hacking methodologies
• Knowledge of network attacks based on MITRE Attack Framework
• Familiarity with exploitation techniques and frameworks (network firewalls, intrusion detection systems, networks)

Benefits:

• Training will be provided based on the selectee's needs and experience.
• Flexible work schedule