Cloud Cybersecurity Analyst - Intermediate

Falconwood, Incorporated - Suffolk, VA

Full-time

Suffolk, VA

Professional, Scientific, and Technical Services

About the position

Falconwood is a woman-owned and veteran-owned company that specializes in providing consultation and programmatic support to Department of Defense (DoD) Information Technology (IT) initiatives and programs. We are dedicated to delivering expert advice across a diverse range of IT subjects, with a particular focus on acquisition, cybersecurity, engineering, logistics, and process development. We are currently seeking motivated individuals who are interested in pursuing a career in Cybersecurity. This position offers the opportunity to be part of a dynamic team and to face daily challenges in a fast-paced environment. As a member of our team, you will be responsible for performing key steps in the Risk Management Framework (RMF), specifically Steps 2, 5, and 6. Your role will involve analyzing cloud cybersecurity requirements, technologies, risks, and issues, as well as participating in the design of solutions, defenses, or mitigation approaches. You will be expected to research, document, and apply cyber best practices, controls, policies, procedures, and standards, ensuring thorough reviews of system authorization artifacts. In addition, you will apply cyber or information privacy approaches to various systems, networks, services, devices, tools, communications, policies, or business processes. A critical part of your responsibilities will include performing detailed analyses of RMF security controls required to protect the system and organization in accordance with assessed risk. You will determine the cybersecurity status with each security control and assessment procedure, ensuring that approved security controls are implemented correctly and operating as intended to meet the security and privacy requirements of the system and organization. You will also compile and submit Weekly and Monthly Activity Reports to keep stakeholders informed of progress and findings.

Responsibilities

• Perform Risk Management Framework (RMF) Steps 2, 5, and 6.
• Analyze cloud cyber security requirements, technologies, risks, or issues.
• Participate in design of solutions, defenses, or mitigation approaches.
• Research, document, and apply cyber best practices, controls, policies, procedures, and standards.
• Perform thorough reviews of system authorization artifacts.
• Apply cyber or information privacy approaches to systems, networks, services, devices, tools, communications, policies, or business processes.
• Perform detailed analysis of RMF security controls required to protect the system and organization in accordance with assessed risk.
• Determine the cybersecurity status with each security control/assessment procedure.
• Determine if approved security controls are implemented correctly, operating as intended, and desired outcome is achieved to meet system's/organization's security/privacy requirements.
• Compile/submit Weekly and Monthly Activity Reports.

Requirements

• Minimum Active Secret DoD Clearance.
• Must meet SECNAV M-5239.2 Cybersecurity Workforce Credential requirements, Cybersecurity Specialty Area 611 (Intermediate): 1) Bachelor degree or higher from an accredited college or university, OR 2) Cyber Leadership Concentration/Certification, OR 3) One of the following certifications: CAP or CCSP or CISSP or Cloud+.
• Minimum two (2) years' experience in Information Security / Information Assurance / Cybersecurity analysis supporting systems, networks, applications, and cross-domain solutions.
• Experience with RMF / Assessment & Authorization (A&A) and Cybersecurity policy development; explicitly Steps 2, 5, and 6.
• Experience with DoD Cloud architecture and technologies.
• In-depth understanding Information Systems/Technologies.
• Proficiency in MS Office applications (Word, Excel, Outlook, Visio).
• Ability to think independently with minimal oversight.
• Exceptional written and oral communications skills.
• Exemplary customer/client management skills and techniques.
• Ability to work in a fast-paced environment.
• Ability to think independently and innovatively.

Nice-to-haves

• Navy RMF / A&A experience.
• DevSecOps experience.