CSSP Protect Analyst

TekSynap•Fort Belvoir, VA

2d•$90,000 - $140,000•Onsite

About The Position

We are seeking a CSSP Protect Analyst to join our Prime Contract with the Defense Threat Reduction Agency. TekSynap is a fast growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.

Requirements

Minimum of a Top-Secret Clearance
DoD 8570 IAT Level II or higher, and CSSP Auditor equivalent certification (DoD 8140)
2-10 years of experience.
BA/BS College degree required.
U.S Citizenship Required

Responsibilities

Act as a senior technical cybersecurity liaison for subscriber organizations, providing advanced, hands-on guidance for resolving complex security posture issues and misconfigurations.
Execute Vulnerability Assessment and Analysis (VAA) using the Assured Compliance Assessment Solution (ACAS) and other tools, analyzing raw scan data to provide actionable remediation steps to system owners.
Drive the Vulnerability Management (VM) lifecycle by actively tracking Information Assurance Vulnerability Management (IAVM) compliance, validating patches, and coordinating with stakeholders to close security gaps.
Support CSSP Evaluator Scoring Metric (ESM) compliance assessments, gathering technical evidence, conducting internal reviews, and participating in JFHQ-DoDIN mandated assessments.
Participate in and support "Blue Team" assessments, performing technical evaluations of subscriber security postures to validate compliance with DoD and agency standards.
Perform technical validation of Virus/Malware Protection mechanisms, ensuring endpoint security tools and boundary defenses are properly configured, active, and reporting correctly.
Implement and validate technical changes required by Cyberspace Protection Condition (CPCON) and INFOCON status updates, TASKORDs, and USCYBERCOM directives.
Assist in customer outreach and the development of technical products, standard operating procedures (SOPs), and automated scripts to improve Defensive Cyberspace Operations - Internal Defensive Measures (DCO-IDM).