Information Security Analyst - Journeyman

Responsibilities

• Support scheduled security control assessments and execute assessment procedures under approved scope and rules of engagement.
• Perform monthly vulnerability scanning and IAVM-related analysis; review scan completeness, identify vulnerabilities, and track remediation status.
• Collect, normalize, verify, and maintain cybersecurity evidence, including logs, configurations, scan results, POA&Ms, prior findings, and change records.
• Monitor assigned systems for configuration drift and unauthorized changes and document results for senior review.
• Affiliate in validating false positives/negatives, retesting remediated items, and mapping findings to applicable controls/frameworks.
• Prepare technical inputs for assessment plans, findings, final reports, scan reports, configuration drift reports, and remediation trackers.
• Support POA&M updates, evidence repositories, action tracking, and cross-site coordination.
• Maintain required clearance, DoD 8140 qualifications, privileged access, and mandatory training.

Requirements

• US. citizenship.
• DoD 8140 /cyberspace workforce qualification: IAT Level III or applicable CSSP/DCWF role.
• Certification: CISSP, CEH, or other Government-accepted certification meeting the required 8140 work role.
• 3+ years conducting DoW network assessments.
• 5+ years performing secure code reviews.
• 2+ years performing penetration testing.
• 3+ years performing security evaluations.
• 1+ year experience supporting DoW expeditionary network environments of similar size and complexity to the Marine Corps Cyberspace Environment (MCCE).
• Ability to meet current DoW, DoN, and USMC privileged-access, background investigation, training, and least-privilege requirements.

Qualifications

• Experience with ACAS/Tenable, DISA STIGs, IAVM processes, RMF evidence development, POA&M workflows, and DoD/USMC network environments.
• Required Training / Administrative Readiness: Complete and maintain required initial/annual NIPRNET account training, including Cyber Awareness, OPSEC, and Privacy/PII.
• Complete applicable SIPRNET training, including Derivative Classification and local SIPRNET user agreements; NATO Secret briefing if mission-required.
• Complete annual CUI training and local installation/security briefings.
• Maintain required CAC/DBIDS/site-access credentials and comply with DISS visit request requirements.
• Maintain valid passport/visa/driver documentation when required by the duty location or travel assignment.