Cyber Security Analyst

Unclassified - Virginia Beach, VA

Full-time

Virginia Beach, VA

About the position

The Cyber Security Analyst will support the Naval Surface Warfare Center Dahlgren Division Dam Neck Activity by providing enterprise management and technical support. The role focuses on developing Risk Management Framework (RMF) accreditation packages and maintaining Authorization to Operate (ATO) certifications for networked systems and applications. The analyst will ensure compliance with DoD and Civilian Agency policies, particularly those outlined in NIST standards.

Responsibilities

• Monitor and assess existing Information Security Management and Security Technical Architecture, regulations, and controls.
• Assess proposed Information Security Management and Security Technical Architecture, regulations, and controls.
• Maintain regular meetings and informal dialog with RDT&E Lab Managers and ISSOs to gather specifics on their capability and core support requirements.
• Maintain records in the Enterprise Mission Assurance Support Service (eMASS).
• Evaluate technical testing from Assured Compliance Assessment Solution (ACAS) scans and other approved toolsets.
• Monitor security access, passwords, badges, and log-ins to ensure system safety.
• Use firewalls and information security standards to secure the organization.
• Perform security assessments, vulnerability testing, and risk analysis.
• Conduct security audits, both internal and external.
• Identify the cause of security breaches.

Requirements

• DoD Top Secret Security Clearance
• 7+ Years of Experience in Cyber Security
• Bachelor Degree or Equivalent Work Experience
• Familiarity with NIST IT Security Special Publication (SP) 800 Series, especially NIST SP 800-37 and NIST SP 800-53 rev 4/5
• Cyber Security Workforce level IAM II/III
• CASP, CISM, or CISSP preferred
• Familiarity with forensics analysis
• Experienced STIG reviewer
• Proficient in Microsoft Visio and Microsoft Project

Nice-to-haves

• Navy Qualified Validator (NQV) Level II
• Familiarity with ACAS, RedSeal, and Carbon Black
• Familiarity with the Vulnerability Remediation Asset Manager (VRAM) web tool
• Familiarity with the Continuous Monitoring and Risk Scoring (CMRS) web tool