About the role
Description
Roles and Responsibilities
Essential
- JCIP Technical Reviewers play a pivotal role in evaluating the cybersecurity posture of enterprise environments across the Intelligence Community (IC). Conduct thorough technical assessments of UNIX-based systems (e.g., Solaris, AIX, Linux variants) for compliance with Intelligence Community Directives (ICDs), Security Technical Implementation Guides (STIGs), Security Requirement Guides (SRGs), and NIST 800-53 Rev 5 and 800-171 controls.
- Other: Perform manual audits of UNIX configurations, user access controls, file system permissions, patch management, and security logging.
- Analyze vulnerabilities related to UNIX systems and recommend mitigation strategies aligned with JCIP and IC security policies.
- Interpret and apply complex STIG requirements specific to UNIX environments.
- Collaborate with system administrators, security teams, and leadership to present findings and provide actionable security recommendations.
- Lead and mentor Level 1 UNIX inspectors, providing guidance on technical evaluations and inspection reporting.
- Stay updated on emerging UNIX threats, patches, and best practices for system hardening.
- Participate in inspection planning, execution, and reporting.
- Travel as required to support onsite inspections. (8-12 weeks of travel avg, some international and passport required).
- The primary day-to-day seat is at Tysons Corner.
Knowledge, Skills, and Abilities
- Knowledge: Deep understanding of UNIX operating systems including Solaris, AIX, and major Linux distributions (Red Hat, CentOS, Ubuntu).
- Expertise in system hardening, patch management, user and group management, file permissions, and security auditing.
- Proficient in interpreting UNIX-specific STIGs and aligning findings with NIST 800-53/800-171 controls.
- Familiarity with shell scripting for automation of audit and remediation tasks.
- Skills: Strong hands-on experience performing manual UNIX system security audits.
- Ability to analyze system logs, identify anomalies, and assess system security posture.
- Effective verbal and written communication skills for technical briefings and reporting.
- Leadership and mentoring capabilities for guiding junior inspectors.
- Abilities: Independently lead UNIX inspections with minimal supervision.
- Provide expert recommendations for system configuration and architecture improvements.
- Manage inspection schedules and deliverables effectively.
- Adapt inspection techniques to diverse UNIX environments and organizational policies.
Requirements
Certifications: Obtain an IAT-III or Maintain IAT Level III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management.
CASP+ CE
CCNP Security
CISA
CISSP (or Associate)
GCED
GCIH
CCSP
Level Certifications Indicative of Qualification
- Level 1- CompTIA Linux+, Red Hat Certified System Administrator (RHCSA), Solaris Certified System Administrator (SCSA)
- Level 2 - Red Hat Certified Engineer (RHCE), Linux Professional Institute Certification (LPIC-2), Certified Information Systems Security Professional (CISSP)
- Level 3 - Red Hat Certified Architect (RHCA), GIAC Certified UNIX Security Administrator (GCUX), CISSP-ISSAP
- Education: Possess a master’s degree, with 8+ years of total experience/equivalent certifications.
Other
:
- Master’s degree may be substituted with a bachelor’s degree and 5+ years of additional experience/equivalent certifications, for a total of 13+ years.
- Clearance: Hold a Top Secret Security Clearance with SCI eligibility.
- Ability to Pass CI Poly.