Cyber Security Analyst

Arizona Employer Plans - Sierra Vista, AZ

Full-time - Mid Level

Sierra Vista, AZ

About the position

The Cyber Security Analyst position at DVS involves supporting the RCC-CONUS by conducting routine Information Assurance (IA) audits, ensuring compliance with security controls, and assisting in the development of security plans. The role requires an active Secret clearance and focuses on maintaining the security of information systems in a cutting-edge technology environment.

Responsibilities

• Conduct routine IA audits on all Information Systems to ensure appropriate IA security controls are applied and maintained.
• Evaluate Information Systems for compliance with Risk Management Framework (RMF) 800-53 Controls and Special Directives.
• Assist with continuous monitoring of RMF packages within eMASS, including POA&Ms, Test Results, and Risk Assessments.
• Record and prepare artifacts associated with audits to maintain a current repository of RMF documentation.
• Provide Certification and Accreditation (C&A) support by conducting risk and vulnerability assessments.
• Utilize 800 Series NIST Special Publications for C&A, system security plans, and risk assessments.
• Create, edit, and review documentation for clarity and accuracy, assisting in the development of security-related TTPs, SOPs, and processes.
• Use automated security scanning tools to identify potential vulnerabilities.
• Analyze and report findings to technical teams and leadership for tracking and mitigation.
• Research RFIs from technical teams regarding DISA STIG checklists and regulations.
• Explain requirements to systems administrators to ensure proper understanding.
• Review proposed courses of action from technical teams and recommend secure options while balancing operational requirements.
• Assist in identifying, tracking, and remediating security risks on information systems.
• Prepare and deliver detailed reports and presentations to senior leaders.
• Coordinate with internal and external entities to improve processes and ensure efficient execution of analysis and reporting requirements.
• Coordinate with cross-functional teams and management to resolve compliance issues.
• Support and/or lead special projects as required.
• Complete other duties as assigned by management.

Requirements

• Active Secret clearance or ability to obtain one.
• Experience conducting IA audits and compliance evaluations.
• Knowledge of Risk Management Framework (RMF) and NIST 800-53 Controls.
• Familiarity with automated security scanning tools (e.g., SCAP, ACAS, BNA).
• Ability to prepare and deliver detailed reports and presentations.
• Strong analytical skills to assess vulnerabilities and compliance issues.

Nice-to-haves

• Experience with eMASS and RMF package monitoring.
• Familiarity with DISA STIG checklists and regulations.
• Strong communication skills for explaining technical requirements to non-technical staff.

Benefits

• Health insurance
• 401k retirement plan
• Paid holidays
• Professional development opportunities