CSSP Protect Analyst

TekSynap•Fort Belvoir, VA

5d•Onsite

About The Position

We are seeking a CSSP Protect Analyst to join our Prime Contract with the Defense Threat Reduction Agency. TekSynap is a fast growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers. We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays. Visit us at www.TekSynap.com . Apply now to explore jobs with us! The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation. By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP". As part of the application process, you agree that TekSynap Corporation may retain and use your name, e-mail, and contact information for purposes related to employment consideration.

Requirements

Active Top-Secret Clearance with SCI eligibility required.
DoD 8570/8140 IAT Level II or higher certification.
DoD 8570/8140 CSSP Auditor or equivalent certification (e.g., CEH, CFR, CySA+, GCIA, GCIH).
2–10 years of progressive cybersecurity, threat intelligence, or vulnerability management experience.
BA/BS College degree required.
U.S Citizenship Required

Responsibilities

Act as the technical cybersecurity liaison for subscriber organizations, providing advanced, hands-on guidance for resolving complex security posture issues, patching delays, and system misconfigurations.
Actively track and analyze CISA’s Known Exploited Vulnerabilities (KEV) catalog using standardized cybersecurity frameworks, including Common Vulnerabilities and Exposures (CVE) identifiers, National Vulnerability Database (NVD) resources, Common Vulnerability Scoring System (CVSS) severity vectors, and Common Weakness Enumeration (CWE) classifications, to evaluate localized risks, prioritize mitigation efforts, and coordinate rapid remediation with system owners.
Execute comprehensive vulnerability assessments using the Assured Compliance Assessment Solution (ACAS) and other enterprise scanning tools, analyzing raw scan data to deliver actionable, prioritized remediation steps to stakeholders.
Monitor, evaluate, and digest cyber threat intelligence feeds, indicator of compromise (IOC) alerts, and open-source threat reports to anticipate emerging vectors and proactively adjust defensive postures.
Support CSSP Evaluator Scoring Metric (ESM) compliance assessments, gathering technical evidence, conducting internal control reviews, and maintaining organizational readiness for JFHQ-DoDIN mandated evaluations.
Coordinate and support "Blue Team" assessments, performing technical evaluations of subscriber security postures to validate compliance with DoW and agency-specific cybersecurity standards.
Perform technical validation of endpoint security tools, host-based security systems, and boundary defense mechanisms to ensure malware protection policies are active, correctly configured, and reporting to central CSSP consoles.
Track, implement, and technically validate compliance with USCYBERCOM TASKORDs, Cyber Protection Condition (CPCON) shifts, and JFHQ-DoDIN operational directives.
Lead compliance focused working groups with subscriber IT teams. Guide them through gathering technical evidence, conducting internal control reviews, and ensuring total readiness for rigorous DoW and agency-level cybersecurity audits (e.g., CORA, CSSP evaluations).