Cyber Security Analyst - 306211

Job Summary: The ISSO / Cyber Security Analyst will support Department of War (DoW) cybersecurity compliance, Risk Management Framework (RMF) activities, and continuous monitoring for networked systems and applications. The analyst will assist with maintaining Authorization to Operate (ATO) packages; managing security documentation and evidence; reviewing Security Technical Implementation Guide (STIG) compliance; assessing vulnerabilities; and coordinating remediation activities with network, system administration, and engineering teams. The analyst will use Tanium to support endpoint visibility, asset and software inventory, vulnerability identification, patch-compliance monitoring, and remediation tracking. This position will work closely with Information System Security Managers (ISSMs), ISSOs, system owners, and technical teams to maintain compliance with applicable DoD cybersecurity policies, NIST guidance, and organizational security requirements.

Responsibilities:
• Monitor and assess existing Information Security Management and Security Technical Architecture, regulations, and controls (FIPS, NIST, DISN Connection Process Guide(CPG), Navy RMF Process Guide (RPG), Navy Testing Guidance)
• Assess proposed Information Security Management and Security Technical Architecture, regulations, and controls (FIPS, NIST, DISN CPG, Navy RPG, Navy Testing Guidance)
• Maintain regular meetings/notes and informal dialog with RDT&E CORE/LAB managers and ISSOs to keep them abreast of upcoming Information System Security Manager (ISSM) requirements and to gather specifics on their capability and core support requirements and trends
• Maintain records in the Enterprise Mission Assurance Support Service (eMASS)
• Evaluating technical testing from Assured Compliance Assessment Solution (ACAS) scans, Evaluate STIG, eMASSter), and Security Technical Implementation Guide Viewer tool using FMATS or other NAVSEA or DoD-approved toolset.
• Monitor security access, passwords, badges, logins, to keep a site or system safe
• Use firewalls and information security standards to keep their organization secure
• Perform security assessments, vulnerability testing and risk analysis
• Conduct security audits internal and external
• Identify the cause of security breaches

Requirements

• DoD Top Secret Security Clearance
• Cyber Security Workforce level IAM II/III CASP, CISM, or CISSP required
• 5+ Years of Experience in Cyber Security
• Bachelor's degree or Equivalent Work Experience
• Familiarity with NIST IT Security Special Publication (SP) 800 Series with emphasis on NIST SP 800-37 and NIST SP 800-53 rev 4/5
• Forensics analysis familiarity
• Experienced STIG reviewer
• Microsoft Visio and Microsoft Project user

Desired Qualifications:

• Familiarity with ACAS, Tanium and Carbon Black
• Familiarity with the Vulnerability Remediation Asset Manager (VRAM) web tool
• Familiarity with the Continuous Monitoring and Risk Scoring (CMRS) web tool

Benefits

Benefits Include:

• Covers 100% of employee benefit premiums, including Medical (PPO or HDHP Option), Vision, Dental
• Matching 401K
• Short- and Long-Term Disability
• Pet Insurance
• Professional Development/Education Reimbursement
• Parking and Transit Benefits for NY, NJ, ATL, and DC Metro areas

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Salary Compensation: $105,000-$115,000