Cybersecurity Systems Analyst, Intermediate

Feditc - Hurlburt Field, FL

Full-time - Mid Level

Hurlburt Field, FL

Professional, Scientific, and Technical Services

About the position

FEDITC is seeking an Intermediate Cybersecurity Systems Analyst to work at Hurlburt Field AFB, FL. This role involves performing assessments and authorizations, advising on Risk Management Framework (RMF) compliance, and ensuring the integrity of customer systems by identifying and mitigating vulnerabilities. The analyst will work closely with network and system administrators and utilize various cybersecurity tools to maintain compliance with regulations and standards.

Responsibilities

• Tracks A&A status of SIE governed ISs and ensures documentation is available in the USSOCOM-chosen automated tool.
• Advises stakeholders on the adequacy of implementation of cybersecurity requirements.
• Provides DoD & IC RMF subject matter expertise and assists with the development and execution of the RMF program.
• Maintains, tracks, and validates DISN, cloud, and DIA connection approval packages.
• Develops and maintains supporting documentation for new and existing networks, cloud environments, information systems, and technologies.
• Develops and reviews the A&A of SIE networks, cloud environments, systems, services, and devices to obtain necessary authorities to operate.
• Performs risk and vulnerability assessments of IT and IS for authorization and prepares risk assessment reports.
• Assists with the enforcement of A&A and connection standards for networks and systems.
• Tracks and maintains A&A databases and tools to ensure proper documentation and management from a cybersecurity perspective.
• Tracks and reports compliance with applicable Cybersecurity regulations and directives to higher headquarters organizations.
• Ensures timely notifications are made to prevent lapses in accreditations.
• Develops and maintains an Information Security Continuous Monitoring (ISCM) Plan.
• Identifies, assesses, and advises on cybersecurity control compliance and associated risks.
• Coordinates with various organizations to support the resolution of security issues and connection approvals.
• Performs security authorization and assessments for networks, cloud, hardware, software, and devices.
• Validates the patching of systems and develops Plans of Action & Milestones (POA&Ms).
• Provides subject matter expertise for COA development and Cybersecurity mitigation strategies.
• Develops and implements processes to mitigate vulnerabilities for software and hardware deployment.
• Identifies and validates the effectiveness of key performance parameters and applied security measures.
• Performs analytics on cybersecurity posture and provides reports to stakeholders.

Requirements

• United States Citizenship and an active TS/SCI DoD Security Clearance.
• Experience with Risk Management Framework (RMF) and NIST 800-53 compliance.
• Knowledge of cybersecurity tools such as ACAS, Nessus, and Security Content Automation Protocol.
• Ability to perform security evaluations and vulnerability assessments.
• Experience in developing and maintaining A&A documentation and processes.

Nice-to-haves

• Familiarity with DISA Security Technical Implementation Guides (STIG).
• Experience in liaising with network and system administrators.
• Knowledge of cyber network defense tools such as endpoint security and SIEM.