Cybersecurity Analyst (contingent 045)

Key Responsibilities

• Provide expert guidance to ensure that systems comply with military RMF requirements as outlined in DoDI 8510.01 for DoD IT.
• Support the Authority to Operate (ATO) process and maintain ATO certifications.
• Conduct technical assessments of systems using tools like ACAS, SCAP, and STIGs.
• Identify and analyze system vulnerabilities, developing POA&Ms for remediation.
• Recommend and implement effective remediation strategies to address identified security deficiencies.
• Assess programmatic impacts associated with the implementation of common control requirements within the RMF.
• Provide expertise on cloud and network security, including cloud security infrastructure products and tools.
• Utilize a variety of cybersecurity tools and technologies, including but not limited to: HBSS, DLPe, ENS, ePO, Tychon, Threat Intelligence and analysis, IoT security, AI/ML applications, WSUS, SIEM tools, Splunk, IAM solutions, IDS, IPS tools, SCAP, STIG Viewer, and Evaluate STIG tools.

Qualifications

• Proficient understanding of the Risk Management Framework (RMF) and its application to complex information systems.
• Strong analytical skills with the ability to identify and assess cybersecurity vulnerabilities and risks.
• Excellent written and verbal communication skills for reporting findings and recommendations clearly to stakeholders.

Education And Experience

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field; relevant certifications are a plus.
• Minimum of 5 years' experience in cybersecurity engineering.
• Required certifications: DoD 8570.01-Manual (M) Baseline Certification for an Information Assurance Manager (IAM) Level III.
• Secret security clearance is required.