Cybersecurity Analyst (Remote)

Position Description

The Cybersecurity Analyst manages POA&M tracking, TRM submissions, Business Partner Extranet (BPE) connection management, and supports security documentation for the platform.

Minimum/General Experience

• 5 years of experience in cybersecurity and information assurance
• Bachelor's Degree in cybersecurity, information technology, or related field; CompTIA Security+ or Certified Authorization Professional (CAP) certification (preferred)

Essential Skills/Qualifications

• Excellent experience creating and maintaining POA&Ms
• Excellent ability to ensure POA&M alignment to National Institute of Standards and Technology (NIST) security control families and Control Correlation Identifiers (CCI)
• Excellent experience drafting and maintaining TRM submissions
• Excellent ability to submit and maintain Business Partner Extranet (BPE) connection requests
• Above average experience maintaining security documentation
• Experience supporting a federal agency
• Excellent verbal and written communication skills

General Physical Requirements

• Sedentary Work - Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects.
• Typing, communicating, repetitive motions.
• Close visual acuity to prepare and analyze data, view computer monitors and read.
• May need to view presentation screens and other visual aids in a virtual setting.
• Inside environmental conditions with protection from outside elements.

Security

• Active Federal Civilian Public Trust clearance
• U.S. Citizenship or Permanent Resident that has lived in the United States for at least 3 years
• Federal Civilian Public Trust Consists of a review of up to but not limited to:
• Covers 10 year period and in some instances lifetime events
• OPM Security Investigations Index (SII)
• DOD Defense Central Investigations Index (DCII)
• National Agency Check (NAC) records
• FBI name check
• FBI fingerprint check
• Credit report check
• Written inquiries to previous employers and references listed on the application for employment
• Potential interviews with the subject, spouse, neighbors, supervisor, coworkers
• Law enforcement check
• Court records check

Education

• Education check - Attendance and Degrees

Tasks/activities

• Creates and maintains POA&M within ServiceNow (SNOW) Continuous Authorization Monitoring (CAM) ensuring proper alignment to relevant NIST security control families and CCIDrafts and maintains POA&M verbiage aligning with findings and clearly depicting mitigation strategy and timeline as required by the portfolio Information System OwnerEnsures POA&Ms are closed out once overcome by events (OBE), mitigated, or no longer relevant to the system to which they are assignedDrafts justification verbiage and attends TRM approval board meetings for software and application usage requests; submits requests for TRM entry removal as usage becomes unneededSubmits and maintains BPE connection requests including information gathering and staffing all required BPE admin team meetingsCatalogs and maintains a complete list of all BPE connections used within the platform and m