Cyber Security Analyst III

We need to output HTML fragment with sections for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We need to parse the job posting. First, identify sections: - About the role: The first paragraph(s) describing duties: "Providing expert oversight to maintain continuous compliance through monitoring, validating, and enforcing operational security to ensure EDSO's confidentiality, integrity, and availability Modifying and implementing secure network connectivity between Amazon Web Services and the USMC Evaluating and remediating potential security risks, where identified Evaluating and remediating potential cloud, network, host, application, identity, firewall, load-balancing, WAF, and CI/CD pipeline security risk Supporting DevSecOps pipeline administration, including secure code integration, configuration management, software deployment, vulnerability scanning, dependency scanning, secrets management, and CI/CD security controls Supporting Cloud and network logging, alerting, monitoring, incident response, vulnerability remediation, and continuous compliance activities Coordinating with platform engineers, network engineers, system administrators, developers, mission owners, and customer-support personnel to validate cyber security controls; maintain operational security; resolve cyber security incidents; support system changes; and sustain secure, reliable, and available IL6 cloud services Provides operations and customer support for all services, to include, but not limited to: Operating System Maintenance VPC Configuration Infrastructure as Code Tools Amazon Web Services (AWS) SCCA Network Components (Cisco Routers and F5 devices) SCCA firewall (Palo Alto) Identity and Access Management - Active Directory (AD) Multi-Factor Authentication Intrusion Detection and Intrusion Prevention System (IDS/IPS) Assured Compliance Assessment Solution (ACAS) Microsoft Defender Windows Server Update Services (WSUS) Online Certificate Status Protocol (OCSP)" That's a long list of responsibilities. So we can put under

Responsibilities

with

• items. - About Us: The paragraph about SRC: "About Us Scientific Research Corporation is an advanced information technology and engineering company..." That's about the company, not the role. Could be "About the role"? Actually "About Us" is company description. The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can put company description under "About the role"? Usually "About the role" is a summary of the position. The first paragraph(s) could be considered "About the role". The "About Us" could be omitted as boilerplate? It's not boilerplate but it's about the company. The instruction says we can include sections only when posting has real specific content. It does have content about the company. But the allowed headings list includes "About the role". Not "About Us". So we could put that content under "About the role". However the first part already describes duties; we could combine both? Better to separate: "About the role" could be a brief summary: maybe the first sentence: "Providing expert oversight to maintain continuous compliance..." That's more duty. The "About Us" is company description; maybe we can include it under "About the role" as well, but it's okay. - Requirements: list of BS degree, 10 years experience, etc. That's requirements. - Qualifications: maybe overlapping with requirements; but we can treat "Requirements" as qualifications. The posting includes "Requirements BS degree..." and then later "Desired Skills". So we have Requirements (mandatory) and Desired Skills (desired). So we can have sections: Requirements (mandatory) and Skills (desired). Also maybe "Qualifications" could be same as Requirements; but we can skip Qualifications if we already have Requirements. The instruction says prefer few substantive sections over many thin ones. So we can have: Responsibilities, Requirements, Skills, Benefits, maybe About the role. - Benefits: The posting mentions "SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more." That's specific benefits. So include Benefits section. - Pay: Not mentioned. No salary info. So omit Pay. - Schedule: Not mentioned besides travel requirement: "Travel one week per quarter to Charleston, SC or Stafford, VA". That's schedule/travel. Could be considered Schedule? The instruction says include Schedule section only if posting actually states them. Travel requirement could be considered schedule. But we might put under Responsibilities or a separate Schedule? The heading list includes Schedule. Since travel is mentioned, we could include Schedule section with that detail. However it's not a regular work schedule; it's travel. Might be okay to include Schedule. - Also there is "FILLING THIS POSITION IS CONTINGENT UPON FUNDING" - that's minor metadata; we can drop. - Clearance Information: "SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET ELIGIBILITY". That's a requirement (clearance). Could be part of Requirements. - Also "Travel Requirements Travel one week per quarter to Charleston, SC or Stafford, VA". That's schedule. - Also "About Us" we already considered. - Also EEO boilerplate to remove. - Also "For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information." That's also requirement. - Also "Scientific Research Corporation endeavors to make www.scires.com accessible..." that's boilerplate. - Also contact info for accommodation requests: we can drop. Thus we need to output HTML with sections: maybe About the role (summary), Responsibilities (list), Requirements (list), Skills (desired), Benefits (list), Schedule (travel). Possibly also Qualifications? But we can combine Requirements and Qualifications; but we have both mandatory and desired. We'll treat Requirements as mandatory qualifications, Skills as desired. We must not repeat job title as heading. No job title given. We must not include Job ID/requisition numbers. We must preserve ALL substantive information; do not invent or summarize away detail. So we need to keep all details from the posting, but we can format as lists. We need to be careful not to lose any detail. Let's extract all substantive statements. First, responsibilities/duties: - Providing expert oversight to maintain continuous compliance through monitoring, validating, and enforcing operational security to ensure EDSO's confidentiality, integrity, and availability - Modifying and implementing secure network connectivity between Amazon Web Services and the USMC - Evaluating and remediating potential security risks, where identified - Evaluating and remediating potential cloud, network, host, application, identity, firewall, load-balancing, WAF, and CI/CD pipeline security risk - Supporting DevSecOps pipeline administration, including secure code integration, configuration management, software deployment, vulnerability scanning, dependency scanning, secrets management, and CI/CD security controls - Supporting Cloud and network logging, alerting, monitoring, incident response, vulnerability remediation, and continuous compliance activities - Coordinating with platform engineers, network engineers, system administrators, developers, mission owners, and customer-support personnel to validate cyber security controls; maintain operational security; resolve cyber security incidents; support system changes; and sustain secure, reliable, and available IL6 cloud services - Provides operations and customer support for all services, to include, but not limited to: - Operating System Maintenance - VPC Configuration - Infrastructure as Code Tools - Amazon Web Services (AWS) SCCA Network Components (Cisco Routers and F5 devices) - SCCA firewall (Palo Alto) - Identity and Access Management - Active Directory (AD) - Multi-Factor Authentication - Intrusion Detection and Intrusion Prevention System (IDS/IPS) - Assured Compliance Assessment Solution (ACAS) - Microsoft Defender - Windows Server Update Services (WSUS) - Online Certificate Status Protocol (OCSP) That's a lot. We'll put each as
• . Now Requirements (mandatory): - BS degree in engineering, physical science, physics, network security, computer science - 10 years of experience in relevant technical field, to include: technology analysis and assessment, design definition, development of systems specification, systems analysis, systems architecture, systems/equipment integration, test & evaluation criteria - Experience with DevSecOps practices, secure CI/CD pipelines, configuration management, infrastructure as code, and secure software-delivery processes - Experience with cloud automation, and infrastructure-as-code tools (Ansible, Terraform, CloudFormation, Lambda) - Experience with Python, JSON - Experience supporting secure cloud networking, network segmentation, routing, firewall policies, and cloud connectivity - Experience with Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), continuous monitoring, vulnerability management, and cyber security compliance - Experience developing cyber security documentation, operational procedures, security-control evidence, remediation plans, risk registers, and technical reports - Ability to identify operational cyber security risks, assess potential mission impact, recommend mitigation measures, and track remediation through closure - Amazon Web Services (AWS) experience - Five years of technical experience in cyber engineering, network infrastructure, networking, server virtualization, object-oriented programming, software development, software configuration, software installation, or cloud transition, and cyber security - Desire to work in a secure lab environment - Holds an CompTIA Security+ or higher certification - U.S. citizenship (implied from clearance requirement) - U.S. government security clearance at the Secret level with Top Secret eligibility - Must meet eligibility requirements for access to classified information (security investigation) - Travel one week per quarter to Charleston, SC or Stafford, VA (maybe schedule) - Filling this position is contingent upon funding (maybe drop as minor metadata) We need to decide what to include in Requirements vs Skills. Desired Skills: - Experience with container security - Experience supporting GitLab security capabilities, including code scanning, dependency scanning, secrets management, runner security, auditing, and CI/CD pipeline controls - Experience with cloud security logging, monitoring, alerting, incident response, threat detection, and security-event analysis - Experience reviewing and validating cloud, network, firewall, WAF, load-balancing, and identity-and-access-management configurations - Network experience SAFe (Scaled Agile Framework) - Recognized expert who has demonstrated industry and/or public service (e.g., federal, state, or local) leadership in Information Technology services - Experience may be concurrent Also maybe "Experience may be concurrent" is vague. Now Benefits: - medical, dental, and vision plans - 401(k) with a company match - life insurance - vacation and sick paid time off accruals with amounts increasing based on role and years of service - 11 paid holidays - tuition reimbursement - work environment that encourages excellence and more Also maybe "generous benefit package". Now Schedule: Travel one week per quarter to Charleston, SC or Stafford, VA. Now About the role: Could be a brief summary: maybe the first sentence about providing expert oversight etc. But we already used that in responsibilities. Could combine About the role as a short paragraph summarizing the position: "Providing expert oversight to maintain continuous compliance through monitoring, validating, and enforcing operational security to ensure EDSO's confidentiality, integrity, and availability; modifying and implementing secure network connectivity between AWS and USMC; evaluating and remediating security risks; supporting DevSecOps; coordinating with engineers; providing operations and customer support." But we need to preserve all substantive info; we can't summarize away detail. However we can keep the detail in Responsibilities; About the role can be a brief overview that doesn't omit details? The instruction says preserve ALL substantive information; do NOT invent or summarize away detail. If we put a summary in About the role that omits details, that would be summarizing away detail. So we should