ASSOCIATE IT SPECIALIST - IT SPECIALIST - Cybersecurity Specialist

Ensuring the organization's IT infrastructure remains secure, compliant, and operational. Provide recommendations to management on processes and systems. Tasked with key responsibilities tied to CMMC (Cybersecurity Maturity Model Certification) compliance efforts and the broader scope of maintaining a robust security and IT governance framework. Monitor system compliance and operational security health to ensure adherence to internal policies and industry standards. Investigate technical problems of various complexity levels, formulate solutions, and document comprehensive procedures to ensure repeatability and measurement. Utilize Trellix App Control. Enforce allow-listing to ensure that only authorized and approved applications are executed across endpoints and servers. Monitor application usage and track deviations or anomalies that may indicate unauthorized or malicious activity. Ensure all software on endpoints and servers is compliant with industry security standards and organizational policies. Regularly scan and validate installed software against the CMMC requirement for inventory and vulnerability management. Remove unauthorized or unsupported apps Maintain a current inventory of all hardware, software, and user accounts in the environment. Identify unauthorized devices and applications, ensuring they are promptly decommissioned or accounted for. Leverage centralized tools for automated asset discovery and tracking. Securely configure and maintain servers that support Trellix App Control and other critical applications. Implement backup and disaster recovery strategies to mitigate operational disruptions. Conduct routine server patching, hardening, and monitoring. Apply security patches consistently and according to a systematic schedule. Create a validation process to ensure that updates do not disrupt business-critical operations. Document a process for maintaining awareness of vendor-released updates or patches. Requires a Bachelors degree in Cybersecurity, Information Technology, Computer Information Systems, or related degree field. 1-5 years: Relevant work in Cyber Security or experience with CMMC compliance, application whitelisting, and system patching. Current TS clearance with SCI eligibility is preferred but not required. A valid/clear driver's license is required.