Cyber Analyst

RBR Technologies•Fort Meade, MD

About The Position

RBR-Technologies is a small service-disabled veteran-owned information and technology business founded on the basic principle of delivering customer mission success. RBR-technologies prides itself on our commitment to mission success as exemplified by the trust our customers and contract partners place in us. From RBR's first employee to the present day, every team member has a passion for mission success. Since 2011, we have continued to employ the highest caliber of professionals whose success is attributed to the intelligence, dedication, and years of experience within many government organizations including the Intelligence Community (IC), Department of Defense (DoD), and Defense Information Systems Agency (DISA). RBR-Technologies is seeking a Senior Cyber Analyst who can provide holistic enterprise defensive strategies for enterprise cyber security capabilities implemented within the infrastructure of the DODIN to include but not limited to Cloud, network boundaries, cross domains, and varying endpoint technologies.

Requirements

Active TS/SCI
Bachelor's degree in a relevant technical discipline and 8-12 years of experience; 4 years additional experience can be used in lieu of a degree
Comprehensive understanding and/or experience with Cloud Infrastructure and/or Cloud Security tools and services (IAM, CI/CD, WAF, CASB, Cloud tools)
Understanding of Zero Trust concepts and solutions (Seven Pillars, Capabilities, Activities, ZT Strategy, etc.)
Currently possess DoD 8750 certification at IAT level II, Security +CE.
Familiarity with all related aspects of cybersecurity operations and security architecture
Experience and knowledge of network and application protocols like TCP, UDP, ICMP, HTTP, SSH, etc
Familiarity with basic security concepts such as firewalls, antivirus software, and network security.
Experience remediating cyber vulnerabilities like misconfigurations, Unpatched software, weak APIS, etc
Ability to identify common exploitation techniques like SQL Injection, buffer overflow, phishing, malware
Excellent communication, collaboration, and presentation skills.
Experience with technical and/or military writing and staff work.

Nice To Haves

Experience with DISA and DoD Information Networks (DODIN).
Experience with configuring networking devices (i.e. routers, firewalls, IDPS)
Demonstrate knowledge of Cybersecurity Domains and its application
Experience with mitigation development against malicious cyber activity
Proficiency in scripting languages such as Python or PowerShell for automating security tasks.
Cloud certification

Responsibilities

Provide analysis of architecture, technologies, DOD policy & information and critical data
Develop cybersecurity and risk assessment methodologies and procedures to support prevention, detection, and mitigation of anomalous activity, vulnerabilities and inefficiencies.
Prepare and perform briefings appropriate for senior leadership (i.e., general officer or flag officer)
Conduct analysis of enterprise cybersecurity defensive strategies in order to enable operational effectives, defense, and command and control.
Analyze network infrastructure in order to recommend methods and strategies that reduce and/or manage adverse impacts.
Develop standards, metrics and measures to support assessments, process improvements and operational efficiencies across the DODIN.
Expert understanding of various technologies and cybersecurity areas of interest including but not limited to: Boundary Security: Identify, discover, and maintain cognizance of the DODIN boundary, inclusive of IAPs, peering points, and other major points of ingress/egress to the DODIN; Document and maintain boundary architectures, understand employed defensive capabilities and available sensor data.
Endpoint Security: Perform analysis, to include planning, assessing, and/or providing enterprise strategies for compliance and integration strategies with mid-tier, and boundary capabilities.
Cloud Security: Develop strategies to monitor, detect, and prevent unauthorized manipulation and access of cloud services.