LEAD CYBERSECURITY SPECIALIST AND TRAINING ANALYST – DOT

Job Title: Lead Cybersecurity Specialist and Training Analyst  

Location: Mostly remote - Washington, DC 

Job Category: Information Technology        

Time Type: Full-time    

Potential for Telework: offsite work granted in advance in writing by the COR 

Minimum Clearance Required to Start: Clearable 

Employee Type: W2 or 1099     

Citizenship: US Citizen, no Dual Citizenship   

NexThreat is seeking an experienced Lead Cybersecurity Specialist and Training Analyst to lead Departmental enterprise cybersecurity programs, which may involve enterprise security architecture, federal requirements compliance programs, and other related initiatives. We are looking for someone who can manage a multidisciplinary program of cybersecurity research, engineering, technical services, and information management for the Department and has experience in planning, engineering, and implementing complex technical capabilities. 

Responsibilities: 

• Define strategic priorities in government-wide cybersecurity initiatives and identify new privacy and security opportunities of DOT systems. Explain in writing, in presentations and at briefings the strategic value of cybersecurity and privacy and its importance as a business enabler 

• Develop high-level plans, techniques, and measurable objectives to improve cybersecurity development and privacy measures and practices in meeting agency goals and protecting sensitive information 

• Make decisions that are data-driven and recommend solutions that measure cybersecurity and privacy protection performance 

• Works in collaboration with the CISO in developing a comprehensive cybersecurity strategy for the Department, including leveraging DOT’s cybersecurity and privacy program as a mission enabler, and creating performance measures for the DOT cybersecurity and privacy program 

• The incumbent oversees the implementation of higher-level security requirements, such as those resulting from legislative, regulatory, or Presidential directives 

• Ensures the confidentiality, availability, and integrity of IT systems through full compliance with the

• Federal Information Security Modernization Act, related NIST standards, and agency IT security policies and standards. Continually evaluates current system security posture, monitors activities, and assesses the security awareness knowledge of staff as it relates to assigned areas of responsibility 

Qualifications: 

• Ability to maintain a continuous effort to improve operations, streamline work processes, and work cooperatively and jointly to provide quality, seamless customer service to both internal and external staff and providers 

• Works with user groups to provide training, resolve questions, assess needs, and recommend changes to data systems 

• Highly skilled in administrative planning activities, including preparation of functional and specific support plans, preparing and managing correspondence 

• Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means 

• Experience developing and delivering training plans, course material, and providing both online and classroom training 

• Ability to format and configure large documents in Microsoft suites and Adobe PDFs  

• Ability to format and configure datasheets and workbooks in Microsoft suite e.g., Excel or Sharepoint List 

• Ability to exercise judgment when policies are not well-defined 

• Ability to focus research efforts to meet decision-making needs 

• Ability to function effectively in a dynamic, fast-paced environment 

• Develop systems, test plan components, and test scripts 

• Ability to perform detailed quality control checks on significant and diverse data sets related to programs 

• Ability to serve in a collaborative function for research design, data collection, interpretation, and presentation; working with key stakeholders to identify reporting needs, define the reporting requirements, design the report, and write the code required to deliver the report 

• Skill in developing, maintaining, and overseeing cybersecurity efforts and cybersecurity training materials