Position SummaryECS is seeking a Defensive Cyber Assessment Analyst - Senior to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. This position supports Task 3 - Cybersecurity Operations Support - by assisting with security control assessments and validation activities across ARNG classified and unclassified network environments. The analyst conducts configuration reviews, analyzes vulnerability scan results, collects assessment evidence, documents findings, and supports POA&M updates, remediation tracking, and follow-up validation testing under senior oversight. In this role, the candidate contributes to ENOCS delivery of Defensive Cyberspace Operations - Internal Defensive Measures (DCO-IDM) and works as part of the broader cybersecurity operations team that provides continuous cyber defense, compliance, vulnerability management, and RMF support.
This role supports a mission environment delivering DoDIN services to more than 120,000 users and approximately 141,000 endpoints across about 2,800 sites in 54 states and territories. ENOCS supports ARNG Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and classified SIPRNet operations across the DoDIN-Army-NG area of responsibility. The Defensive Cyber Assessment Analyst - Senior operates within a technical environment that includes eMASS, vulnerability and compliance workflows aligned to RMF, Security Technical Implementation Guides (STIGs), Information Assurance Vulnerability Alerts (IAVAs), and enterprise cybersecurity operations coordinated with the NETCOM Global Cyber Center and DISA DCDC.
Please Note: This position is contingent upon contract award.Responsibilities- Conduct configuration reviews and assist with security control assessment activities for ARNG systems and services under senior oversight.
- Analyze vulnerability scan results and document assessment findings to support remediation and cybersecurity compliance actions.
- Collect, organize, and maintain assessment evidence required for RMF activities, security reviews, and supporting documentation.
- Support development and maintenance of POA&Ms by tracking deficiencies, remediation status, and validation of corrective actions.
- Perform follow-up validation testing to confirm that identified findings have been resolved in accordance with RMF requirements and DoD and ARNG cybersecurity policy.
- Assist with updates to eMASS records and associated artifacts to support continuous assessment and ongoing maintenance of authorization.
- Review system configurations against applicable STIGs, IAVAs, and cybersecurity guidance to identify control gaps and compliance issues.
- Support Task 3 deliverables by documenting assessment results that inform vulnerability management, secure baseline configuration, and continuous compliance validation activities across ARNG classified and unclassified enclaves.
- Coordinate assessment support activities with the broader ENOCS cybersecurity operations team operating in conjunction with the NETCOM Global Cyber Center and DISA DCDC to strengthen DCO-IDM outcomes across the DoDIN-Army-NG AOR.
Required QualificationsU.S. Citizenship is required
Security Clearance: TS//SCI Eligible
Required Certifications: DCWF Work Role 541-Vulnerability Assessment Analyst - Basic proficiency; must hold ONE OR MORE of the following: CEH
Experience: 3+ years of experience in cybersecurity
- Experience supporting security control assessments, validation activities, or comparable cybersecurity compliance reviews.
- Experience reviewing system or device configurations and documenting findings in a clear, auditable manner.
- Experience analyzing vulnerability scan results and assisting with remediation tracking and follow-up verification.
- Experience supporting POA&M management processes, including documenting deficiencies and monitoring closure status.
- Familiarity with RMF processes and the collection of evidence needed to support authorization and continuous assessment activities.
- Working knowledge of DoD and ARNG cybersecurity policy implementation in classified and unclassified environments.
- Ability to produce accurate written assessment documentation, supporting artifacts, and status updates for senior cybersecurity personnel.
