Cyber Security Risk AnalystWork Location:
Required onsite work at the client location at Scott Air Force Base, Illinois with situational telework only
Job description
Electrosoft Inc. is seeking a Cyber Security Risk Analyst (CSRA) who can help support the creation and visualization of metrics to support decisions and reduce threats across the Enterprise. The ideal candidate will provide expertise with the implementation of "Metrics that Matter" to assist the client in meeting the requirements to address Risk Management Framework (RMF) and Vulnerability Management to on-premises and Cloud networks. Additionally, they will assist in integrating systems and data while securing the environment against evolving Cybersecurity threats and modernizing to achieve mission success.
Duties & Responsibilities:
The CSRA will assist in design of innovative solutions and services to support our team and customer in improving our collection and visualization of metrics to support Vulnerability Management (VM), Risk Management Framework (RMF) and to address various Cyber Security Service Provider Inspection requirements to improve the overall risk assessment, better understand performance, improve situational awareness and facilitate the enhanced cyber security posture. Ultimately providing for potential interoperability between current systems and ensuring timely decision making based on near real-time data availability through data analytics and product development. Additionally, the CSRA shall utilize skills in DoD computing, networking/transmission, cybersecurity policy, and data analytics to:
- Develop meaningful and actionable metrics, to include Key Performance Indicators (KPI) and Key Risk Indicators (KRI), as directed by the Government
- Integrate metrics with cyber readiness framework
- Analyze and define data requirements and specifications
- Develop data model(s), integrations, and analytics to enhance cyber readiness assessment and to enable decision support
- Conduct queries to analyze data sets
- Conduct trend analysis to identify systemic security issues by analyzing vulnerability and configuration data
- Analyze future eMASS changes, to include the altering or addition of new data elements and advise product stakeholders, propose solutions, and initiate preventative or corrective action as determined by the stakeholders.
- Monitor health of daily ingests, advise stakeholders when ingest operations are degraded, and propose corrective actions during periods of ingest degradation or failure.
- Perform Extract, Transform, and Load (ETL) Operations
- Accomplish data ingestion, processing, distribution, and visualization
- Develop and maintain analytics code repository (Python and SQL) and data visualization programs (Qlik)
- Deploy analytics workloads using Databricks
Basic Qualifications:
- At least 5 years of experience in cybersecurity, information technology, Software Development or related field.
- Know Python, SQL, basic HTML/CSS
- Familiarity with DoD Vulnerability Management (VM) and Risk Management Framework (RMF)
- Knowledge of business intelligence visualization tools
- Excellent communication, collaboration, and problem-solving skills.
- Ability to work independently and as part of a team.
- Data analytics is preferred in Advana or Qlik, however a general familiarity with R or Python analytics (ex; spark, pandas)
- Minimum of a Bachelor of Science (or higher) in one of the following: computer engineering, computer science, IT, cyber security, or a related field.
- Relevant years of experience may be used in substitution for situations where the candidate does not have a Bachelor's degree in the required field.
- Must have 8140 compliant certification (e.g. GCFA, GCIA, CySA+, GICSP, CFR )
- Minimum of an active Secret Clearance.
Pay Range
$115,000-$125,000 USD
