Apply
Description
ABOUT US:
Soliel, LLC is an accomplished and innovative Woman Owned Small Business (WOSB) delivering IT engineering and critical mission support services to the public sectors. Soliel offers reach-back to experts in each field, a culture that supports employee growth and development, and a stable environment that affords cross-collaboration. We are currently seeking an ISSO to support our DoD customer. The objective of this role is to identify, remediate, and validate security vulnerabilities and configuration weaknesses to strengthen the security posture of mission systems supporting the nation’s Warfighters, national level leaders, and mission and coalition partner organizations.
Location: Fort Meade, Maryland Start Date: ASAP Clearance: Secret
Key Responsibilities:
· Review and analyze ACAS/Nessus vulnerability scan results and DISA STIG findings to determine appropriate remediation actions · Perform hands-on remediation of cybersecurity findings, including system configuration changes, patching, security settings, permissions, services, and other hardening activities · Apply and validate applicable DISA STIGs and Security Requirements Guides (SRGs) · Develop, document, and maintain enterprise security configuration baselines for supported Windows, Linux, and other operating systems, aligned with applicable DISA STIGs, SRGs, and organizational security requirements. · Perform post-remediation validation and support rescanning to confirm findings have been corrected · Troubleshoot vulnerability and configuration findings and coordinate with system engineers or administrators when remediation requires broader system or application changes · Review scan results for accuracy, including potential false positives, credentialed-scan issues, and findings requiring additional technical validation · Prioritize and drive critical/high vulnerabilities and aging findings through technical closure · Support remediation of IAVAs, DTOs, and other DISA cybersecurity taskings · Work with system engineers, administrators, and cybersecurity personnel to ensure hardening changes do not adversely affect system functionality or mission availability · Develop and maintain technical procedures, checklists, remediation documentation, and supporting evidence for closed findings · Provide remediation evidence and technical information needed to support POA&M, eMASS, and compliance updates · Communicate remediation status, technical issues, dependencies, and blockers to project and Government stakeholders
Required Skills:
· Active Secret clearance · 4+ years of relevant DoD or Federal cybersecurity, systems administration, vulnerability management, or system-hardening experience · Hands-on experience remediating ACAS/Nessus vulnerabilities and DISA STIG findings · Experience implementing security configuration changes and system-hardening requirements · Experience supporting Windows Server and/or Linux/RHEL environments · Ability to troubleshoot technical findings and determine appropriate remediation steps · Experience validating remediation through rescanning or manual verification · Working knowledge of vulnerability management, patching, secure configuration, and continuous monitoring processes · Basic understanding of RMF, POA&Ms, and security controls and how technical remediation supports cybersecurity compliance · Ability to work across engineering, systems administration, cybersecurity, and Government teams to drive findings to closure · Strong written and verbal communication skills · Ability to work full-time onsite at Fort Meade
Preferred Skills:
· Experience supporting DoD or DISA programs, particularly in enterprise or boundary environments (e.g., NIPR/SIPR, DMZ) · Experience with ACAS/Tenable, STIG Viewer, SCC/SCAP, OpenSCAP, or similar security assessment and compliance tools · Experience hardening Windows and/or Linux systems in DoD environments · Experience with PowerShell, Bash, Python, Ansible, or other scripting/automation tools used to support remediation or system hardening · Familiarity with eMASS, POA&M processes, and DoD RMF · Relevant cybersecurity certification meeting applicable DoD 8140/8570 requirements EEO/ AA/ NON-DISCRIMINATION STATEMENT: Soliel, LLC is an Equal Opportunity/ Affirmative Action/ Non-Discriminatory Employer. All qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity, age, physical or mental disability, or covered veterans. To learn more, please visit www.solielcom.com