Cyber Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Review, submit, and monitor Authority to Operate (ATO) packages.

• Assess current mission systems and their cybersecurity posture.

• Develop, evaluate, and suggest Standard Operating Procedures (SOPs) and templates in line with relevant regulations, policies, and best practices.

• Analyze business processes and offer Risk Management Framework (RMF) guidance along with documentation support.

• Extract, analyze, and report on Host-Based Security System (HBSS) data.

• Provide RMF recommendations and assist with the preparation, delivery, tracking, and oversight of RMF artifacts and documentation.

• Support security reporting obligations related to network operations, deployments, DISA STIG compliance, encryption projects, and security mandates.

• Address inquiries, tasks, and data requests from government stakeholders and partner organizations.

• Aid in authorization and accreditation processes for systems, applications, and infrastructure.

• Identify, mitigate, and resolve cybersecurity challenges and concerns.

• Conduct vulnerability assessments using ACAS, SCC, and other approved tools.

• Facilitate compliance and reporting requirements for Information Assurance Vulnerability Alerts (IAVA).

• Carry out remediation, imaging, and threat mitigation tasks.

• Provide support for Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), vulnerability scanning solutions, anti-virus platforms, HBSS, firewalls, web filtering solutions, and VPN technologies.

• Implement and manage RMF processes pertaining to information systems and networks.

• Ensure that Accreditation and Authorization (A&A) documentation adheres to relevant regulations and guidelines.

• Create and maintain documentation that supports Authority to Operate (ATO), Authority to Connect (ATC), Certificate of Networthiness (CON), and System Security Plan (SSP) requirements.

• Conduct RMF validation procedures and security control assessments.

• Verify the implementation of cybersecurity controls and security mandates.

• Deploy emerging cybersecurity solutions and best practices.

• Offer cybersecurity guidance and assistance to system owners and stakeholders.

• Engage in incident response and spillage management activities.

• Monitor and report on IAVM metrics and vulnerability status.

• Promote cybersecurity education, awareness, and training programs.

• Perform security evaluations that include:

• • Security policy development
• • Security engineering and architecture design
• • Operational security management
• • Network security testing and evaluation
• • Computer security incident response
• • Vulnerability analysis
• • Malicious code analysis
• • Security risk assessment
• • Security certification and accreditation
• • Assess and Authorize (A&A)
• • Risk analysis
• • Trending analysis
• • Event and Incident analysis

• Document the current security posture, identify vulnerabilities, and offer mitigation suggestions.

• Execute other job-related responsibilities as assigned.

⛳️ Requirements

• Bachelor’s Degree in Computer Science, Information Systems, or a related area.

• At least three (3) years of IT experience within a mid-to-large enterprise environment.

• Strong understanding of information assurance policies and procedures.

• Experience in supporting software, system, and enclave authorization and accreditation processes.

• Knowledge of systems architecture, security risk analysis, risk mitigation reporting, and vulnerability assessments.

• Experience in supporting cybersecurity regulatory compliance and program management efforts.

• Extensive experience with:

• • SCCM
• • Group Policy Management
• • Active Directory Services
• • Operating System image management
• • Patch management
• • Security update deployment

• Significant experience conducting ACAS scans, reporting, and remediation.

• Familiarity with eMASS and POA&M management.

• Proficient in RMF implementation and continuous monitoring.

• Experience in creating and testing Continuity of Operations Plans (COOP).

• Experience in reviewing security logs, SCAP scans, and HBSS reports.

• Ability to deploy applications and operating system images via enterprise ticketing systems.

• Capacity to confirm that deployed images are free from vulnerabilities prior to release.

• Ability to assess cybersecurity risks and provide efficient mitigation strategies.

• Security+ Certification is mandatory.

• Capability to obtain and maintain a Public Trust clearance.

• Must successfully complete pre-employment qualifications.

🏝️ Benefits

• Medical

• Dental

• Vision

• 401(k)

• Additional benefits as available