Cybersecurity Analyst / Active Secret

About the role

We are seeking a Cybersecurity Analyst to support U.S. Marine Corps (USMC) enterprise-level hybrid cloud data center operations. The position enables USMC worldwide customers to execute critical missions.

Responsibilities

• Work with a team responsible for all aspects of cybersecurity support to the hybrid-cloud enterprise hosting environment.
• Conduct vulnerability analysis and self-assessment technical analysis, monitor and report compliance status, manage and maintain the accreditation packages and support plan of action and milestone (POA&M) for known security vulnerabilities.
• Support ATO package development for the datacenter.
• Participate in the continuous monitoring program supporting datacenter operations.
• You will support 2 ISSM and an ISSO.
• Provide technical and authorization and accreditation support.
• Conduct vulnerability management assessments using ACAS (Tenable Nessus), Evaluate STIG, Open RMF and other tools including mitigation development and POA&M and documentation support.
• Coordinate and collaborate with operations teams to identify solutions for vulnerability mitigation and prepare cybersecurity documentation to obtain support and approval to operate.
• Prepare systems for review and independent verification and validation (self-assessments).
• Develop POA&M for identified vulnerabilities and develop remediation, mitigation and criticality downgrade strategies.
• Support accreditation activities for installed and in-deployment infrastructure as well as requirements in development and engineering change proposal/pipeline processes such as developing supporting documentation and completing cybersecurity compliance requirements.
• Coordinate with independent verification and validation team and program office ISSM cybersecurity support to enable overall cybersecurity program activities.
• Develop, maintain, edit, author, and support accreditation package requirements including use of the DOD accreditation management tool eMASS.
• Develop scripting and automation and other supporting infrastructure for continuous monitoring activities.

Requirements

• BS/BA degree and minimum of 8 years of relevant experience, or an MS and 6 years of relevant experience. An additional 4 years of relevant experience will be considered in lieu of the bachelors degree.
• IAT II Certification (8570) and ability to achieve DOD 8140 CSWF Role Vulnerability Assessment Analyst-Intermediate when required.
• Demonstrated strong understanding and application of RMF And DISA STIG/Security framework implementation, experience with cloud implementation.
• Expert experience conducting Tenable ACAS vulnerability management and reporting using Security Center, Nessus.
• Experience with IAVM/IAVA management and reporting.
• Demonstrated understanding of DoD cybersecurity infrastructure tools including PKI, Data encryption, Microsoft MDE/Sentinel, DOD IA Tookit
• Strong technical foundation with system administration skills and experience to support independent assessments of cybersecurity risk and mitigation measures of enterprise data center systems including Virtualization, networking, Storage (SAN, NAS), Windows, Linux, Oracle and SQL database
• Experiencing operating within an SaFe Agile project structure, Enterprise ITSM solution and queue operations.
• Experience maintaining RMF-based accreditation packages.
• Experience using a certification and accreditation tool/GRC -- eMASS preferred.
• Experience with the configuration of datacenter monitoring and management solutions.
• Experience using Log Management and SIEM solutions to support cybersecurity program.
• Fundamental understanding of ITSM/ITIL processes.
• U.S. Citizenship required.
• DoD Secret Clearance/Tier 3 BI.

Preferred

• ACAS and RMF certification.
• Azure or AWS Cloud Certification or training completed.
• ITIL training or certification desired.
• BMC Remedy/Helix experience.