CSSP Protect Analyst Lead

TekSynap•Fort Belvoir, VA

8h•$120,000 - $170,000•Onsite

About The Position

The Lead Cybersecurity Protect Analyst oversees the “Protect” function within the Defense Threat Reduction Agency (DTRA) Cybersecurity Service Provider (CSSP). Serving as the primary Subscriber Cybersecurity Liaison, this role provides dedicated cybersecurity support, high-level strategic guidance, and ensures all defensive operations strictly align with DoD 8530.01 directives. The Lead Analyst is responsible for proactively managing vulnerabilities, validating protective countermeasures, and measuring the operational effectiveness of subscriber enclaves.

Requirements

Minimum of a Top-Secret Clearance
DoD 8570 IAT Level II or higher, and CSSP Analyst equivalent certification (DoD 8140)
5-12 years of experience.
BA/BS College degree required.
Knowledge of DoD network architectures, security tools (e.g., SIEM, ACAS, firewalls)
Strong verbal and written communication skills to articulate technical information and provide guidance to a variety of audiences
U.S Citizenship Required

Responsibilities

Serve as the primary Subscriber Cybersecurity Liaison, providing dedicated cybersecurity support and high-level strategic guidance to DTRA and customer organizations.
Monitor and support Service Level Agreements (SLAs), ensuring all subscriber interconnection security requirements and CSSP support agreements are met.
Oversee Vulnerability Assessment and Analysis (VAA) using the Assured Compliance Assessment Solution (ACAS) and other enterprise tools, providing reporting verification and high-level remediation guidance.
Manage the Vulnerability Management (VM) lifecycle by liaising with system owners, regularly validating compliance and enforcing Information Assurance Vulnerability Management (IAVM) directives.
Plan and conduct CSSP Evaluator Scoring Metric (ESM) compliance assessments, driving internal annual reviews and participating in DCDC mandated external ESM assessments.
Coordinate Blue Team assessments to practically test Subscriber security postures and validate that defensive measures are compliant with DoW and agency standards.
Validate and provide high-level guidance on Virus/Malware Protection, ensuring proper configuration and maintenance of detection mechanisms across endpoints and DoWIN boundaries.
Enforce compliance with Cyberspace Protection Condition (CPCON) and INFOCON status changes, ensuring defensive boundaries adapt to USCYBERCOM directives and advanced threats.
Lead customer outreach and product development, ensuring Subscriber enclaves are integrated with DoWIN operations and Defensive Cyberspace Operations – Internal Defensive Measures (DCO-IDM).
Prepare and deliver detailed reports for senior leadership and stakeholders, documenting security threats, incident trends, risk mitigation efforts, and all activities and guidance provided.