CLVG Consulting - Ashburn, VA
posted 3 months ago
We are seeking an experienced Cyber Security Analyst to join our team at CLVG Consulting, Inc. in Ashburn, VA. The successful candidate will play a vital role in ensuring the security and integrity of our organization. The Cyber Security Analyst will be responsible for testing, implementing, and maintaining various security measures, testing controls, and providing technical support to ensure the smooth operation of IT infrastructure. This position requires a proactive approach to identifying security risks and vulnerabilities, as well as the ability to collaborate effectively with government counterparts and vendors to ensure compliance with security protocols. In this role, you will forecast and track vendor activities, ensuring a repeatable and documented assessment methodology is applied to all DHS vendor systems under test. You will develop objectives for the security assessment and create a detailed roadmap for system testing. Identifying security risks and threat vulnerabilities across vendor systems and connection points within the accredited system boundary will be a key responsibility. You will finalize and obtain government lead approval for the test plan and collaborate with government counterparts to select and configure vulnerability assessment tools. Additionally, you will create a testing schedule for each application or system under test, coordinate testing schedules with vendors and facility managers, and ensure that supporting staff are familiar with the system, test plan, and procedures. You will refine or develop Standard Operating Procedures (SOP) for executing the contract plan, including Rules of Engagement (ROE) and test schedules in the Project Plan. Documenting test results in the Security Requirements Traceability Matrix (SRTM) and securely storing all materials according to DHS policy will also be part of your duties. You will assist in and/or brief the government task lead on vendor testing results and develop Security Assessment Reports (SAR) that document security control assessment results, including recommendations for correcting weaknesses or deficiencies. Analyzing findings and developing risk mitigation techniques will be essential, as will updating the SAR template annually and finalizing the report upon government team lead approval. Furthermore, you will provide direct mission system or technical support for vendor risk mitigation and assessment activities, engage in new and innovative technology identification, evaluations, testing support, systems evaluations, analytics, and other related tasks as directed by the Project Manager. Collaboration with other teams to develop and implement cyber security assessment and policies will also be expected.