Cyber Operations Analyst

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Deliver cyber security operations and incident response assistance for USCG navigation systems, including CG ECDIS.

• Assist with cyber assessments, authorization, compliance, and vulnerability scanning in alignment with DoD STIG standards.

• Execute system administration, image development, maintenance, and work collaboratively with System Engineering teams.

• Update and enhance incident response standard operating procedures in line with CJCSM 6510.01B, NIST SP 800-61R2, and DOW regulations.

• Convert technical findings into status reports for program leadership, DOW officials, and USCG Cyber Command repositories.

• Identify weaknesses in incident response, suggest advanced technologies, and implement improved processes.

• Facilitate data collection for DOW CIO by reviewing PPSM, CAP, SNAP, and GIAP requests against DISA guidelines.

• Conduct post-incident reviews, pinpoint security gaps, and implement preventive actions.

• Provide expert advice on cybersecurity directives and risk management policies; review POA&Ms.

• Carry out forensic investigations to ascertain the nature and scope of vulnerabilities, and identify containment, eradication, and recovery strategies.

• Create system engineering lifecycle artifacts, including system architecture and topologies.

• Oversee response activities for USCG Cyber Command directives and manage the lifecycle of Situational Awareness Reports.

⛳️ Requirements

• Must hold an active Secret clearance.

• Bachelor’s degree in Computer Science or a related discipline.

• Over 5 years of pertinent experience in Information Technology and/or Information Security, focusing on Cybersecurity Operations and Incident Response.

• A Bachelor’s degree may be replaced with military education from DHS USCG or DOD in Information Technology or Information Security, accompanied by five or more years of relevant concurrent experience.

• At least one certification in good standing: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+ CE, CCNP Security, CISSP or Associate, GCED, GCIH, or CCSP.

• Familiarity with Incident Response Handling Procedures, including NIST SP 800-61.

• Knowledge of cyber adversary tactics and frameworks such as ATT&CK and D3FEND.

• Proficiency in one or more cybersecurity tools: Trellix/ESS, Tanium, Microsoft Defender Endpoint, BeyondTrust, or Splunk.

• Excellent communication skills and a strong attention to detail.

🏝️ Benefits

• Health Care Plan (Medical, Dental & Vision).

• Retirement Plan (401k, IRA).

• Life Insurance (Basic, Voluntary & AD&D).

• Paid Time Off (Vacation, Sick & Public Holidays).

• Family Leave (Maternity, Paternity).

• Short Term & Long Term Disability.

• Training & Development.

• Wellness Resources.

• Stock Option Plan.