Journeyman Cybersecurity Analyst

Responsibilities

• Ensure that Cybersecurity requirements are effectively integrated into IS and components through purposeful security architecting, design, development, and configuration.
• Perform FISMA required risk assessment of policies, procedures, supplemental plans addressing network, facilities and system security, security awareness training, testing and evaluation of security controls, incident response plan, and continuity of operations plans.
• Evaluate requests for compliance and integration with all applicable cybersecurity policies, Notice to Airmen (NOTAMs), and Technical Change Orders (TCOs).
• Employ best practices when implementing security controls within an IS.
• Provide assessment and technical input to any system changes for all associated system enclaves.
• Create/maintain a government owned Cyber Schedule that captures all mission cybersecurity activities and actions; the schedule needs to be capable of showing a high-level view of all project/activity milestones, accomplishments, and discrete tasks including Authorization and Assessment activities for RMF packages, cyber assessments, and O&M Mods or depot sustainment cases that improve the systems cybersecurity postures.
• Provide IS and compliance documentation to include but not limited to the following:
• Prepare Documentation for DoD Information infrastructure IAW NIST 800-53
• Categorize IAW Committee on National Security Systems Instruction (CNSSI) 1253
• Implement common controls; develop monitoring strategy, and plan, review, and obtain approval IAW NIST SP 800-53 and CNSSI 1253
• Audit the implemented controls
• Authorize assessment and assist with determination of ATOM
• Monitor controls after ATO compliance via Plan of Actions and Milestones (POAM/POA&M) or other means

Requirements

• High School Diploma with 4+ years’ experience in IT or cybersecurity experience performing IAT Level II functions (threat, attacks, vulnerabilities, identification and access management, architecture and design, and risk management); and/or Bachelor's degree counts for 4 years’ experience
• Experience with Xacta
• Experience with ITIPS, eMASS, FISMA, and/or DISA IASE
• Bachelor’s or master’s Degree
• IAT/IAM level 3 Certification (CISSP, OSCP, CISA, CASP, etc)

Preferred

• Experience with Xacta
• Experience with ITIPS, eMASS, FISMA, and/or DISA IASE
• Bachelor’s or master’s Degree
• IAT/IAM level 3 Certification (CISSP, OSCP, CISA, CASP, etc)

Certification

• IAM or IAT Level 2 Certification (Sec+, CySA+, CCNA, etc)