Cyber Security Analyst

Long Wave - Oklahoma City, OK

Full-time - Mid Level

Oklahoma City, OK

11-50 employees

Publishing Industries

About the position

Long Wave Inc. is seeking a Cyber Security Analyst to join our Strategic Programs department. This full-time position is based in Oklahoma City, OK, and is responsible for designing, developing, documenting, testing, and implementing the cyber security controls necessary to obtain and maintain Department of Defense (DoD) accreditation on a wide range of government-furnished and commercial off-the-shelf systems. The successful candidate will play a critical role in ensuring the security and compliance of our systems, which are vital to the operations of the United States Military. The Cyber Security Analyst will coordinate, develop, and finalize test results required to achieve and maintain an Authority to Operate (ATO) on various systems, utilizing the Enterprise Mission Assurance Support Service (eMASS) website for both classified and unclassified information systems. This role involves developing, maintaining, and updating Plans of Actions and Milestones (POAMs), managing and performing vulnerability assessments using Tenable ACAS/Nessus, and generating Cybersecurity Vulnerability and Compliance reports as necessary. Continuous Monitoring activities, as part of the Risk Management Framework (RMF) process, will also be a key responsibility, along with supporting Assessment and Validation activities such as Annual Security Reviews (ASR) and Assessment and Authorization (A&A). The ideal candidate will be a team player, capable of coordinating tasks among team members to ensure project goals are met in a timely manner. Effective communication skills in English are essential, as is the ability to work independently with little or no supervision. The position may require occasional travel to various work site locations, where professional attire is expected for client and customer interactions. Additionally, the employee may need to work in Secret or Top-Secret spaces, where personal electronic devices are prohibited for up to 50% of the time at Long Wave and up to 10% of the time at Tinker AFB.

Responsibilities

• Coordinate, develop, and finalize test results required to achieve/maintain an Authority to Operate (ATO) on various systems.
• Utilize the Enterprise Mission Assurance Support Service (eMASS) website for both classified and unclassified information systems.
• Develop, maintain, and update Plans of Actions and Milestones (POAMs).
• Manage and perform vulnerability assessments using Tenable ACAS/Nessus.
• Generate Cybersecurity Vulnerability and Compliance reports as necessary.
• Perform Continuous Monitoring activities as part of the RMF process.
• Support Assessment and Validation activities such as Annual Security Reviews (ASR) and Assessment and Authorization (A&A).
• Work as a member of a team and coordinate tasks of team members to ensure project goals are met.
• Communicate effectively in English and work with little or no supervision.

Requirements

• High School Diploma or Equivalent.
• Must hold and maintain DoD approved Cybersecurity workforce certifications as listed in DoD 8570.01 for IAT level II.
• Two (2) years recent experience working with DoD Cyber Security requirements.
• Experience with DoD and Navy IT policies and standards.
• Proficient in Microsoft Office, including Word, Excel, and Outlook.
• Proficient in Windows Server Administration, group policy, and registry.
• Proficient in Windows 10/11 Administration.
• US Citizenship is required.
• Current Secret Clearance (will be validated upon hiring).

Nice-to-haves

• Bachelor's degree in computer science, information technology, or a related field.
• Four (4) years recent experience working with DoD Cyber Security requirements.
• Proficiency in eMASS.
• Current/Ability to obtain Top Secret Clearance.
• Proficiency in SCAP Compliance Checker.
• Proficiency in ACAS Assured Compliance Assessment Solution.
• Proficient in writing Plans of Actions and Milestones.
• Familiarity with RMF Step 6 requirements.