Cyber Security Analyst

Technology Security Associates - Patuxent River, MD

Full-time

Patuxent River, MD

Professional, Scientific, and Technical Services

About the position

JHNA Technology Security is seeking a Cyber Security Analyst to serve as an Information System Security Engineer (ISSE) for the support of tasking that involves the analysis of the posture of systems in support of system certification and accreditation. The role requires collaboration with the Information System Security Officer (ISSO) and Information System Security Manager (ISSM) to develop technical solutions to problems, implement enhancements, and upgrade system architectures. The Cyber Security Analyst will be responsible for implementing categorization for security control selection and creating, maintaining, and updating required Risk Management Framework (RMF) artifacts for Authorization to Operate (ATO) packages. In this position, the analyst will define system security requirements, assess system security architecture designs, and support the development and sustainment of the RMF authorization package throughout all lifecycle phases. The role also involves updating and assessing hardware, software, policies, and processes for compliance with system ATO packages. The analyst will review and update the Plan of Action and Milestones (POA&Ms) as part of the Continuous Monitoring process and perform required security testing as part of the RMF Assess & Authorize process. This includes running SCAP or Evaluate-STIG, completing DISA Security Technical Implementation Guides (STIGs), and running ACAS scans. The Cyber Security Analyst will accurately review vulnerability scan and STIG Checklist results and update them as needed. Attendance at meetings requiring cyber support is necessary, and effective communication of cybersecurity and operations issues to the ISSO/ISSM is essential for the role.

Responsibilities

• Work with Information System Security Officer (ISSO) and Information System Security Manager (ISSM) to develop technical solutions to problems, implement enhancements and upgrade system architectures.
• Implement Categorization for Security Control selection.
• Create, maintain, and update required Risk Management Framework (RMF) artifacts for ATO packages.
• Define system security requirements, assess system security architecture designs, and support the development and sustainment of the RMF authorization package throughout all lifecycle phases.
• Update and assess hardware, software, policies, and processes for compliance of system ATO packages.
• Review and update Plan of Action and Milestones (POA&Ms) as part of the Continuous Monitoring process.
• Perform required security testing as part of the RMF Assess & Authorize process to include, but not limited to, running SCAP or Evaluate-STIG, completing DISA Security Technical Implementation Guides (STIGs), and running ACAS scans.
• Accurately review vulnerability scan and STIG Checklist results and update as needed.
• Attend meetings requiring cyber support as necessary.
• Communicate cybersecurity and operations issues to ISSO/ISSM.

Requirements

• Ability to obtain security clearance - interim required to start working.
• Associate degree and two (2) years of experience OR HS Diploma and five (5) years of experience.
• Security+ CE or equivalent DoD approved 8140 baseline certifications.
• Working knowledge of PowerShell.
• Helpdesk experience and basic troubleshooting skills.
• Willingness to progress to more advanced problem solving.
• Proficiency with Windows 10 and Linux.
• Ability to communicate effectively.
• Experience with creating/maintaining documentation.
• Organizational skills.

Nice-to-haves

• Experience with NAVAIR RMF Process.
• DISA STIG experience.
• ACAS/Nessus experience.
• Experience with eMASS, VRAM, DITPR/DADMS.
• Demonstrated experience implementing project management principles and managing, tracking, and coordinating a wide range of actions, documents, and tasks through completion.
• Proficient in Microsoft (MS) Office applications (e.g. Word, Excel, PowerPoint, and Project).
• Excellent oral and written communications skills. Good interpersonal communications skills.