Cybersecurity Analyst

Aermor - Portsmouth, VA

Full-time - Mid Level

Portsmouth, VA

Professional, Scientific, and Technical Services

About the position

AERMOR LLC is seeking a skilled Cybersecurity Analyst to join our team in Portsmouth, Virginia. The ideal candidate will have a strong background in security testing and evaluation, vulnerability analysis, and firewall policy management. This position requires a minimum of 4 years of experience in the cybersecurity field, with a focus on Vulnerability Risk and Assessment Management (VRAM), Information Security (INFOSEC), and Department of Defense Assessment and Authorization (DoD A&A). The Cybersecurity Analyst will be responsible for conducting security tests and evaluations to assess the integrity of systems, applications, and network infrastructure. This role is critical in ensuring the security and compliance of our systems with DoD standards. In this position, you will develop, implement, and manage firewall policies to protect against unauthorized access and cyber threats. You will also generate an assessment framework and methods for the continuous improvement of Information Assurance (IA) documentation, policies, procedures, and requirements for defending Naval Networking Environment (NNE) architectures. Daily responsibilities will include maintaining all VRAM activities, entering system baseline configurations, and managing the A&A process in compliance with DoD standards. You will provide expert-level support in mission-critical procedures, systems, and processes related to Information Technology and Cyber Security requirements. The successful candidate will have experience in certifying and accrediting Department of the Navy (DON) information systems and networks, as well as in-depth knowledge of security testing and evaluation, vulnerability analysis, and firewall policy management. A CompTIA Security+ certification is preferred, along with familiarity with the requirements outlined in OPNAVINST N9210.3 for safeguarding Naval Nuclear Propulsion Information. This role demands expert and mastery levels of institutional knowledge, with a minimum of 5 years of experience in the relevant fields.

Responsibilities

• Conduct security tests and evaluations to assess the integrity of systems, applications, and network infrastructure.
• Develop, implement, and manage firewall policies to protect against unauthorized access and cyber threats.
• Generate an assessment framework and methods for continued improvements of IA documentation, policy, and procedures and IA requirements for defending Naval Networking Environment (NNE) architectures.
• Maintain all day-to-day VRAM activities.
• Enter the system baseline configuration in VRAM by uploading vulnerability scans of a representative baseline system.
• Manage the A&A process in compliance with Department of Defense standards, including preparation of security documentation.
• Provide expert-level support in mission-critical procedures, systems, and processes related to Information Technology and Cyber Security requirements.

Requirements

• 4+ years of experience in cybersecurity, specifically in security testing and evaluation, vulnerability analysis, and firewall policy management.
• Experience with Vulnerability Risk and Assessment Management (VRAM) and Information Security (INFOSEC).
• Experience with the Department of Defense Assessment and Authorization (DoD A&A) process and standards.
• Bachelor's degree in an IT-related discipline or 9 years of experience in Cyber Security/A&A analysis support.
• Expert and mastery levels of institutional knowledge with a minimum of 5 years' experience in IT and Cyber Security requirements.

Nice-to-haves

• CompTIA Security+ certification (preferred).
• Experience with OPNAVINST N9210.3 Safeguarding Naval Nuclear Propulsion Information (preferred).
• Knowledge of CS/INFOSEC concepts and requirements.