Cybersecurity Analyst

By Light Professional It Services - Newport News, VA

Full-time - Mid Level

Newport News, VA

Professional, Scientific, and Technical Services

About the position

Full Spectrum Operations LLC (FSO), a Service-Disabled Veteran-Owned Small Business (SDVOSB) joint venture, is seeking a Cybersecurity Analyst to support the Regional Network Enterprise Center (RNEC) at Joint Base Langley-Eustis (JBLE), Virginia, as well as the Local Network Enterprise Center (LNEC) at Fort Gregg-Adams, Virginia, and the Joint Expeditionary Base Little Creek Fort Story (JEBLCFS), Virginia. The successful candidate will be responsible for providing comprehensive support for both classified and unclassified communication systems. This role involves a variety of tasks including Site Management, Infrastructure Operation and Maintenance (O&M) for Unified Communications, Inside Plant (ISP) services, Customer Service Telephone support, Outside Plant (OSP) cable maintenance, Battery Maintenance, and Cable Locates. Additionally, the Cybersecurity Analyst will engage in Systems Management, which encompasses Mission Server support, Automation and Network Support, Cybersecurity measures, and Tier II Customer Support. The position also includes responsibilities related to Land Mobile Radio and Configuration Management support. The Cybersecurity Analyst will work on-site during core duty hours from 0700 to 1700, Monday through Friday, excluding Federal holidays. The role requires an 8-hour workday and involves analyzing general information assurance-related technical problems and providing effective resolutions. The analyst will support the Government Capability Manager/Information System Owner (ISO) in ensuring that information systems are configured in accordance with DISA Security Technical Implementation Guides (STIGs), applicable patches, and other cybersecurity requirements. Furthermore, the analyst will assist in adhering to DoD cybersecurity policy requirements as outlined in DoDI 8500.01 and DoDI 8510.01, which govern the Risk Management Framework (RMF) for DoD Information Technology (IT). The position also entails providing support for the independent assessment of compliance of information systems with DoD RMF standards, ensuring that RMF activities align with operational Tactics, Techniques, and Procedures (TTPs) and Operations Orders (OPORDs). The Cybersecurity Analyst will be responsible for providing technical input on RMF Assess Only submissions and contributing to the Enterprise Mission Assurance Support Service (eMASS) to document RMF activities, including the implementation of applicable Security Controls as identified through information system security categorization in accordance with NIST SP 800-53 and CNSSI 1253. The role may also require performing other duties as assigned.

Responsibilities

• Analyze general information assurance-related technical problems and provide resolutions.
• Support the Government Capability Manager/Information System Owner (ISO) in ensuring that information systems are configured IAW DISA Security Technical Implementation Guides (STIGs).
• Support the Government in following DoD cybersecurity policy requirements set forth in DoDI 8500.01 and DoDI 8510.01.
• Provide support for the independent assessment of compliance of information systems with DoD RMF standards.
• Comply with practices identified in the Risk Management Framework (RMF) Knowledge Service.
• Review and ensure RMF activities adhere to operational Tactics, Techniques and Procedures (TTPs) and Operations Orders (OPORDs).
• Provide technical input on RMF Assess Only submissions.
• Provide input to the Enterprise Mission Assurance Support Service (eMASS) to record RMF activities such as control implementation of all applicable Security Controls.
• Perform other duties as required.

Requirements

• Possess an associate's degree or higher.
• Foundational Personnel Certification: CompTIA Security+ or Certified Ethical Hacker (CEH) or CyberSec First Responder (CFR) or CompTIA Cloud+ or Global Industrial Cyber Security Professional (GICSP) or Systems Security Certified Practitioner (SSCP) or GIAC Security Essentials Certification (GSEC).
• Minimum of three years' experience supporting DoD cybersecurity policy requirements and RMF activities.
• Extensive experience with DoD security hardening, collection and assessment tools (STIGs, ACAS, SCAP, Nessus, etc.).
• Experience with security architectures, firewalls, and network access.
• Fluent in spoken and written English, including technical terms commonly used in IT, network routing and switching, telecommunications, IT maintenance, and technical control facilities.

Nice-to-haves

• Supported the U.S. Army or other DoD Agency.
• Has the communication skills to effectively interface with senior military officials, managers, and subordinates.