Find similar career opportunities
DFAS EFD IA/Cyber Analyst Category: Cyber Security
Main location: United States, Virginia, Fairfax
Position ID:J1026-2644
Employment Type: Full Time
Position Description: CGI Federal is seeking an IA/Cyber Analyst to support new upgrade work and system sustainment for the DFAS (Defense Finance and Accounting Service) client team across a geographically dispersed team. If you're a self starter who's organized, dedicated, motivated, and looking for a challenge, then we have the perfect opportunity for you!
As part of our team, you will collaborate with CGI, DFAS and DISA professionals, and be a trusted advisor to help the client achieve their mission goals. You will be responsible for management and update of Risk Management Frameworks (RMF, FISCAM, NIST) and collateral, performing Vulnerability Assessment & Security Impact Analysis (POA&M generation and management), work collaboratively with our client to complete ATO certification, support the client's use of Cyber/Mgmt tools, and evaluate and audit technical & operational controls, including STIGs and SRGs.
This position is located in our Fairfax, VA office; however, a hybrid working model is acceptable.
Performance Responsibilities and Objectives:
Ensure all information security evidence is complete, accurate, and less than a year old
Respond to security data requests in a timely manner
Collaborate with clients and cross functional teams to support the design, configuration, and implementation of cybersecurity solutions
Routinely review Governance, Risk, and Compliance systems when system changes occur
Help organize, coordinate, and manage efforts in the ATO process
Manage and implement value added security tools to support monitoring, analysis, and decision making
Communicate findings and recommendations clearly, translating technical concepts into language that cross functional audiences can understand
Monitor compliance with all federal, RMF, FISCAM, FISMA, and contractual cybersecurity requirements
Take the initiative and organize continuous improvement efforts to strengthen system security posture
Required qualifications to be successful in this role: 5 years of experience with ERP systems and auditing COTS products and with cloud architectures
CompTIA Security + certification
Due to the nature of the work, US citizenship and the ability to obtain a Public Trust clearance
Experience with DoD/DoW
Cyber/IA Qualifications/Experience:
Risk Management Frameworks (RMF, FISCAM, NIST)
Vulnerability Assessment & Security Impact Analysis
Governance & Compliance experience (Evaluating and auditing technical & operational controls) Including STIGs and SRGs
ATO experience
Continuous Monitoring experience
Cyber/Mgmt tools (eMass, CM)
DevSecOps experience
Change & Config Audit experience
Baseline Configuration Management
Technical writing
CM & ITSM tools
Desired Certifications: CISSP, CISM, CySA+, CEH, etc.
CGI is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. To support the ability to reward for merit based performance, CGI typically does not hire individuals at or near the top of the range for their role. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $72,500.00 $160,700.00.
CGI Federal's benefits are offered to eligible professionals on their first day of employment to include:
. Competitive compensation
. Comprehensive insurance options
. Matching contributions through the 401(k) plan and the share purchase plan
. Paid time off for vacation, holidays, and sick time
. Paid parental leave
. Learning opportunities and tuition assistance
. Wellness and Well being programs
#CGIFederalJob
#LI PC1
Skills: - CompTIA Security+
- Information Security Mngt(ISM)
- Momentum Security & Sys Admin
- CompTIA Cyber Security Analyst
- Defense (Fed)
- DevOps
- Ethical Hacking