In-depth knowledge of federal cybersecurity compliance standards and technologies.
Familiarity with encryption, vulnerability management, and multi-factor authentication.
Preferred certifications include CompTIA CySA+, CASP+, PenTest+, SecurityX, EC-Council C|EH, C|IH, GIAC GPEN, or GCIH.
Responsibilities
Research and enforce cybersecurity compliance for government systems.
Investigate system attributes related to encryption and vulnerability management.
Provide technical summaries and insights on cybersecurity data.
Collaborate with Security Assessment Teams to analyze compliance and vulnerabilities.
Assist in remediation strategies for identified security shortcomings.
Conduct detailed technical analyses and maintain records of compliance actions.
Analyze logs for anomalous traffic and potential data exfiltration.
Benefits
Comprehensive health and wellness benefits.
Retirement savings plan options.
Professional development opportunities.
Flexible work arrangements.
Supportive work environment focused on team collaboration.
Full Job Description
M9 Solutions is seeking a Cybersecurity Analyst to work on-site in support of a government contract for a client located in Washington, DC. An active Top Secret clearance is required.
Responsibilities
Researches and enforces technical cybersecurity compliance of government systems.
Investigates the detailed system attributes of encryption, vulnerability management, multi-factor authentication, and centralized logging and auditing, among other disciplines.
Provides technical summaries and input on the data.
Works with the Security Assessment Teams (Red, Blue, Purple, as well as the DCISO/CISO) to perform detailed analysis and identify noncompliant systems and possible vulnerabilities.
Assists in providing methods to remediate shortcomings to client personnel and other stakeholders both internal and external for affected systems.
Conducts in-depth technical analysis, confirms compliance information, and maintains a detailed record of all actions taken, evidence, and communications.
Assists in interpretation and implementation of Federal Government requirements for government systems and coordinates various audits and data calls.
Analyzes logs to determine anomalous traffic and potential exfiltrated data.
Maintains working knowledge of current vulnerabilities of systems and how they can be exploited.
Interprets guidance and technical requirements for implementing security requirements to prevent security breaches and disseminates the guidance in a more readable format to others.
Ensures that current Federal Government security policies are being followed and all required documentation is provided.
Responds to incidents when required to assist in detection, isolation, remediation, and investigation of the incident.
Participates in After Action Reviews (AARs) of incident responses.
Understands and analyzes threat intelligence data to identify emerging threats and proactively defend against them.
Assists with vulnerability management notifications from other government agencies and vendors to ensure that required vulnerabilities within identified government systems are remedied within the required timeline and reported accurately.
Produces, analyzes, and interprets forensically sound images of data and other electronic storage media when required or requested.
Required Skills and Qualifications
Top Secret security clearance.
8+ years of relevant experience.
Detailed knowledge of federal standards and technologies used in cybersecurity compliance disciplines.
Preferred Skills and Qualifications
Industry-recognized certifications such as CompTIA CySA+, CompTIA CASP+, CompTIA PenTest+, CompTIA SecurityX, EC-Council Certified Ethical Hacker (C|EH), EC-Council Certified Incident Handler (C|IH), GIAC GPEN, or GIAC GCIH.
GH 1107
Full-Time Employee Compensation
M9 Solutions' pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include, but are not limited to, responsibilities of the position, education, experience, knowledge, skills, abilities, as well as internal equity, location, alignment with market data, applicable bargaining agreement (if any), or other law.
M9 Solutions is an IT consulting and staffing firm that provides services to clients in a variety of industries, including healthcare, finance, and government. The company offers a range of services, including project management, software development, and data analytics. M9 Solutions was founded in 2010 and is headquartered in Durham, North Carolina.
