Cybersecurity Systems Analyst, Sr.

About the role

The Cybersecurity Systems Analyst, Sr., is needed to work in Coronado, CA. A U.S. citizenship and an active TS/SCI DoD Security Clearance are required for this position.

Responsibilities

• Assesses network compliance against NIST 800-53 controls and creates A&A packages.
• Executes comprehensive assessments, compliance, and validations of IT systems to support the Cybersecurity program.
• Advise on network and system risks, risk mitigation courses of action, and operational matters.
• Performs security evaluations and vulnerability assessments using ACAS, Nessus, and SCAP tools.
• Identifies applicable STIGs and performs assessments using SCAP tool.
• Liaises with network and system administrators to correct identified deficiencies.
• Scans (or reviews scans) for new systems and applications being introduced into the SOF environment, identifies issues, and drafts certification letters for the government.
• Liaises with the Site Integration Facility (SIF) to ensure systems and applications meet DISA Security Technical Implementation Guides (STIG) standards.
• Keeps up-to-date with cyber network defense tools such as endpoint security, SIEM, comply to connect, etc.
• Tracks and maintains A&A status of SIE governed ISs.
• Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.
• Advises stakeholders on the adequacy of implementation of cybersecurity requirements.
• Provides DoD & IC RMF subject matter expertise, and assists with the development and execution of the RMF program.
• Maintains, tracks, and validates DISN, cloud and DIA connection approval packages.
• Develops and reviews the A&A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD & IC RMF to obtain an ATO, IATT, or ATC.
• Performs risk and vulnerability assessments of IT and IS for authorization; prepares risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA).
• Supports the enforcement of A&A, as well as connection standards for networks and systems.
• Tracks and maintains A&A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.
• Ensures timely notifications are made to responsible individuals and organizations in order to prevent lapses in accreditations (e.g., 30, 60, and 90 day notices).
• Develops and implements an Information Security Continuous Monitoring (ISCM) Plan.
• Identifies, assesses, and advises on cybersecurity control compliance and associated risks.
• Collaborates with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&A, connection approvals, and waiver requests.
• Performs network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.
• Validates the patching of systems, performs validation scanning, develops POA&Ms, and reports as directed by applicable policies, procedures, and regulations.
• Provides subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.
• Develops and implements required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.
• Identifies, implements, and validates continued effectiveness of key performance parameters and applied security measures.
• Performs analytics on cybersecurity posture and provides reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction.

Qualifications

• 8+ years of progressive, relevant experience or equivalent combination of education and experience.
• Experience with US Combatant Commands (USCENTCOM/USSOCOM) is desired.
• Technical background with system administration experience, architecture and engineering preferred.
• Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility.
• Working knowledge of the RMF.
• Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired.
• Excellent communications skill (written and oral) and interpersonal skills.
• Knowledge and experience with DoD IA processes and policies (e.g., DODI 8510.01, NIST, CNSS and other cybersecurity policies, CJCSM 65101.01, Incident Response and other IA policies).
• Experience with data analysis and creation of custom reports using Excel, Splunk, and similar tools for report generation.
• Extensive knowledge of eMASS.

Pay

PTO, Holiday Pay, 401K with a 4% Match, Medical Insurance, Dental Insurance, Vision Insurance, Group Life & AD&D, Voluntary Life AD&D, Short-term Disability, Long-Term Disability, Health Savings Account, Flexible Spending Account (Health and Dependent), Critical Illness Insurance, Accident Insurance, Hospital Indemnity Insurance, Employee Assistance Program (EAP).