Odyssey is recruiting for a Cybersecurity Analyst, Sr. to join the team.  The technical expert filling this position will be a trusted advisor and consultant to the government that support the North American Aerospace Defense Command (NORAD) Cheyenne Mountain Complex-Integrated Tactical Warning/Attack Assessment (NCMC-ITW/AA) and Combatant Commanders Integrated Command and Control System (CCIC2S) Enterprise Networks within the Strategic Warning and Surveillance Systems Acquisition Delta. 

Program: The NCMC-ITW/AA effort sustains unique ITW/AA Cheyenne Mountain systems, networks, and associated components through an enterprise-wide set of integrated mission capabilities, support services, and data products that provide military authorities with an accurate, timely, unambiguous and continuous warning and attack assessment of air, missile and space threats.  The CCIC2S effort sustains the CCIC2S Enterprise and provides data communications between external sensors and end users, mission processing for air and missile warning, and system operations functions. 

This is a full-time position at Peterson SFB in Colorado Springs, CO with telework flexibility for local candidates – subject to change per the customer’s discretion.

Duties include, but not limited to: 

• Labor provided to deliver cybersecurity services are certified in accordance with DoDI 8140.02, DoD 8570.01-M and AFMAN 17-1303 standards.  (CDRL A001)
• Ensure that all system deliverables comply with NIST SP 800-53, Risk Management Framework as incorporated and directed in DoD and Air Force/Space Force cybersecurity policy, specifically DoDI 8500.01, Cybersecurity, AFI 33-200, Air Force Cybersecurity Program Management, and AFI 17-101, Risk Management Framework (RMF) For Air Force Information Technology (IT).
• Ensure that cybersecurity policy is implemented correctly on covered systems in the maintenance of Authority to Operate (ATOs).
• Ensure compliance with DoD and Air Force Certification and Accreditation policies, specifically Department of Defense Instruction (DoDI) 8510.01, Risk Management Framework (RMF) for DoD Information Technology, and AFI 33-210, The Risk Management Framework (RMF) for Air Force Information Technology.
• Direct the discovery, monitoring, and elimination or mitigation of both known and unknown vulnerabilities that could compromise the confidentiality, integrity, or availability of the information being processed, stored, or transmitted by covered systems and maintain eMASS Programs of Action and Milestones (POA&M) for same, to include DISA STIGs and the DoD IAVA/IAVM process.
• Conduct Cybersecurity Risk Management for additions/changes to all systems via the Security Impact Assessment (SIA) process.
• Develop a focused approach in the continual improvement of processes and procedures to manage the RMF packages in Enterprise Mission Assurance Support Service (eMASS), Xacta and SGN/CORE.
• Design/Security Test & Evaluation (ST&E) Requirements RMF Control identification, to include building implementation plans and validation plans, assist with the entry and review of entered information to the Information Technology Investment Portfolio Suite (ITIPS), assist with the preparation and review of Federal Information Security Modernization Act documentation.
• The cyber security SME encompasses the full range of cyber security and information security processes, procedures, and functions, to include reviewing data, maintaining/implementing and compliance notification of required IAVAs, NOTAMs and cybersecurity posture for systems.
• SME support includes advising division leadership on architecture mitigations to limit risk posture within the systems and represent the risk posture in briefings and slides to DoD Chief Information Officer, Headquarters USSF and USSTRATCOM; utilize National Institute of Standards and Technology (NIST) 800 series special publications in the development of new system artifacts to ensure compliance.

Minimum Qualifications:

Citizenship:  Must be a US Citizen

Clearance:  Must have an active DoD Secret clearance, eligible for TS/SCI and be able to maintain it

Certification:  DoD IAM Level I (CAP, CND, Cloud+, GSLC, Security+ CE, CISSP)

Education and year’s experience: 

• High School Diploma plus fifteen (15) years of directly related experience; to include eight (8) years of DoD experience; OR

• Bachelor’s Degree in related field and twelve (12) years of experience in the respective technical discipline; to include five (5) years of DoD experience OR

• Master’s or Doctorate Degree in a related field and ten (10) years of experience in the respective technical discipline; to include five (5) years of DoD experience.

Additional Experience:

• Possesses the advanced knowledge, experience and recognized ability to be considered an expert in their technical/professional field.
• Possess the ability to perform tasks and oversee the efforts of junior and mid-level personnel within the technical/professional discipline.
• Demonstrate advanced knowledge of their technical/professional discipline as well as possess a comprehensive understanding and ability to apply associated standards, procedures and practices in their area of expertise.

Preferred Experience:

Clearance: Active TS/SCI

Certification:  DoD IAM Level II/III (CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO,)

Education:  BA/BS degree

Years of Preferred Experience:  twelve (12) years of experience in the respective technical discipline; to include five (5) years of DoD experience

• Previous experience with CCIC2S system.
• Previous experience with the Missile Defense Agency.

Additional Information:

Location:  Peterson SFB, CO

Hybrid: some telework is allowed, subject to change per the customers discretion 

Travel Requirement: up to 15%

#LI-JC1