CSSP Protect Analyst

We are seeking a CSSP Protect Analyst to join our Prime Contract with the Defense Threat Reduction Agency. TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive, well-planned information management environment.

About the role

Act as the technical cybersecurity liaison for subscriber organizations, providing advanced, hands-on guidance for resolving complex security posture issues, patching delays, and system misconfigurations.

Responsibilities

• Act as the technical cybersecurity liaison for subscriber organizations, providing advanced, hands-on guidance for resolving complex security posture issues, patching delays, and system misconfigurations.
• Actively track and analyze CISA’s Known Exploited Vulnerabilities (KEV) catalog using standardized cybersecurity frameworks, including Common Vulnerabilities and Exposures (CVE) identifiers, National Vulnerability Database (NVD) resources, Common Vulnerability Scoring System (CVSS) severity vectors, and Common Weakness Enumeration (CWE) classifications, to evaluate localized risks, prioritize mitigation efforts, and coordinate rapid remediation with system owners.
• Execute comprehensive vulnerability assessments using the Assured Compliance Assessment Solution (ACAS) and other enterprise scanning tools, analyzing raw scan data to deliver actionable, prioritized remediation steps to stakeholders.
• Monitor, evaluate, and digest cyber threat intelligence feeds, indicator of compromise (IOC) alerts, and open-source threat reports to anticipate emerging vectors and proactively adjust defensive postures.
• Support CSSP Evaluator Scoring Metric (ESM) compliance assessments, gathering technical evidence, conducting internal control reviews, and maintaining organizational readiness for JFHQ-DoDIN mandated evaluations.
• Coordinate and support "Blue Team" assessments, performing technical evaluations of subscriber security postures to validate compliance with DoW and agency-specific cybersecurity standards.
• Perform technical validation of endpoint security tools, host-based security systems, and boundary defense mechanisms to ensure malware protection policies are active, correctly configured, and reporting to central CSSP consoles.
• Track, implement, and technically validate compliance with USCYBERCOM TASKORDs, Cyber Protection Condition (CPCON) shifts, and JFHQ-DoDIN operational directives.
• Lead compliance-focused working groups with subscriber IT teams, guiding them through gathering technical evidence, conducting internal control reviews, and ensuring total readiness for rigorous DoW and agency-level cybersecurity audits (e.g., CORA, CSSP evaluations).

Requirements

• Active Top-Secret Clearance with SCI eligibility required.
• DoD 8570/8140 IAT Level II or higher certification.
• DoD 8570/8140 CSSP Auditor or equivalent certification (e.g., CEH, CFR, CySA+, GCIA, GCIH).
• 2–10 years of progressive cybersecurity, threat intelligence, or vulnerability management experience.
• BA/BS College degree required.
• U.S. Citizenship required.

Benefits

• Health, dental, and vision insurance.
• 401K retirement plan.
• Life insurance.
• Short-term and long-term disability plans.
• Paid vacation time and holidays.

Pay

Target salary range: $90,000.00 - $140,000.00. The salary range displayed is an estimate only and is not a guarantee of compensation or salary, and will be determined on several factors regarding the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract parameters and organizational requirements.

Schedule

• Schedule is day shift Monday – Friday.
• May be requested to work evenings and weekends to meet program and contract needs.
• Amount of travel: Less than 10%.

Work Environment and Physical Demands

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• Location: Fort Belvoir, VA.
• Type of environment: Office.
• Noise level: Low.
• While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear.
• The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl.
• The employee is regularly required to lift up to 10 pounds, frequently required to lift up to 25 pounds, and occasionally required to lift up to 50 pounds.
• The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.