Cyber Security Analyst

People, Technology And Processes - Columbus, GA

Full-time - Mid Level

Columbus, GA

Professional, Scientific, and Technical Services

About the position

The Cyber Security Analyst position is located at Fort Moore, GA, and requires a Secret clearance level. The primary responsibilities of this role include validating technical standards and security policies for Local Area Network (LAN) topologies and components, as well as identifying and remediating security vulnerabilities. The analyst will be tasked with configuring, maintaining, and hardening RNEC network devices, which include layer 2 and 3 switches and routers. Additionally, the role involves supporting and troubleshooting remote network services, particularly Virtual Private Networks (VPNs). The Cyber Security Analyst will administer the Host-Based Security System (HBSS) and will be responsible for developing an updated Quarterly Enterprise System Management Architecture Design Document. This document will describe the service level offerings that are deployed and any planned enhancements. The analyst will also draft and maintain Standard Operating Procedure (SOP) documents relevant to their functional category. Another critical aspect of the role is performing scans using the enterprise-provided tools and generating non-compliance reports. The analyst will provide reports and documentation to support submissions for the Risk Management Framework (RMF). They will assist in preparing for Defense Information Systems Agency (DISA) Command Cyber Readiness Inspections (CCRIs) and other cybersecurity-related inspections or evaluations conducted by the Department of Defense or the Department of the Army.

Responsibilities

• Validate technical standards and security policy for LAN topologies and components.
• Identify and remediate security vulnerabilities.
• Configure, maintain, and harden RNEC network devices (layer 2 & 3 switches and routers).
• Support and troubleshoot remote network services (VPN).
• Administer Host-Based Security System (HBSS).
• Develop an updated Quarterly Enterprise System Management Architecture Design Document.
• Draft and maintain Standard Operating Procedure (SOP) documents.
• Perform scanning with the Enterprise provided tool and provide non-compliance reports.
• Provide reports and documentation in support of the submission for the Risk Management Framework (RMF).
• Assist with preparation for Defense Information Systems Agency (DISA) Command Cyber Readiness Inspections (CCRIs) and other cybersecurity-related inspections/evaluations.

Requirements

• CompTIA Security+ baseline certification required.
• Full Computing Environment (CE) certification required.
• Must possess and maintain either a CompTIA CASP, (ISC)2 CISSP or CAP, or ISACA CISM certification.
• Experience with wireless monitoring and Wardriving.
• Knowledge of log collection and analysis.
• Hands-on experience and training on the verification and enforcement of Security Technical Implementation Guide (STIG) identification and remediation.
• Hands-on experience and training on the verification and enforcement of Information Assurance Vulnerability Management (IAVM) identification and remediation.
• Experience with reporting, scanning and analysis using Assured Compliance Assessment Solution (ACAS).
• Knowledge of Certification & Accreditation (C&A) processes and the Risk Management Framework (RMF).
• Experience with Enterprise Mission Assurance Support Service (eMASS).
• Knowledge of Public Key Infrastructure (PKI).
• Knowledge of Cyber Command Readiness Inspection (CCRI) or similar functions/audits.
• Knowledge of Incident Response Plans (IRP) and incident response executions.
• Ability to communicate IA concepts to technical and non-technical personnel.
• Ability to develop technical documents and produce system design documentation.
• Excellent customer service skills.

Nice-to-haves

• Experience with incident response execution.
• Familiarity with cybersecurity frameworks and compliance standards.