Oneida Technical Solutions, LLC (OTS) is seeking an experienced Senior Analyst to support a contract in Fort Belvoir, VA. This position is located at Fort Belvoir in Virginia and reports to the Senior Program Manager. **Duties and Responsibilities:** - Provide support to the RNEC-NCR Belvoir following the DoD Cybersecurity Policy requirements set forth in DoDI 8500.01, "Cybersecurity," and DoDI 8510.01, "Risk Management Framework (RMF) for DoD Systems." - Ensure information systems are configured in accordance with DISA STIGs, applicable patches, and other cybersecurity requirements. - Manage the security of all Information Systems that are NEC-owned and maintained by the RNEC-NCR, including servers, workstations, network devices, and peripherals. - Perform enterprise-wide internal and external vulnerability testing and scanning to assess security posture on both SIPRNET and NIPRNET networks utilizing DoD-approved solutions. - Coordinate, facilitate, configure, implement, and maintain the minimum standards and requirements of Government initiatives such as RMF, Cyber Operational Readiness Assessment (CORA), and Information Assurance Vulnerability Management (IAVM) Program. - Conduct Security Risk Assessments of resources, controls, vulnerabilities, and threats, and facilitate decisions to implement security countermeasures or mitigate risk. - Monitor, detect, and defend the security of all Information Systems utilizing AESS modules and security solutions. - Maintain all Risk Acceptance and Exception to Policy memos throughout their lifecycle. - Provide guidance to customers for Assess and Authorize requirements for new applications and systems not approved for the DODIN-A. - Review and submit all Tenant Support Plans (TSPs) and associated documentation to the change management board for Government review and approval. **Minimum Qualifications:** - 3 years of experience in Cybersecurity. - Intermediate System Administrator, Vulnerability Assessor, or Security Control Assessor certification (e.g., Security+, GSEC). - Experience with Windows Server Administration. - The Cybersecurity Analyst shall possess Security+ certification. No Continuing Education (CE) required. - Knowledge of COMSEC principles, methods, practices, systems, and procedures sufficient to administer the communications circuit security program and DoD EKMS program. - Experience with wireless monitoring. - Knowledge of log collection and analysis. - Knowledge and experience in communicating cybersecurity concepts to both technical and non-technical personnel; ability to develop technical documents and produce system design documentation. - Knowledge and experience with DoD Risk Management Framework (RMF) and use of eMASS. - Obtain required DoDM 8140.03 CE/Baseline Certifications prior to contract start. **Additional Skills:** - Knowledge of securing Windows Servers, Windows Desktops, UNIX, Linux, virtual servers, log collection tools, and analysis techniques. - Ability to communicate cybersecurity concepts clearly and develop technical documents and system design documentation. - Experience with ACAS, managing and securing Active Directory user accounts, and compliance with DoD Security configuration guidance. - Project a positive image and professional manner at all times; ability to work within a set time schedule.