Cyber Analyst

Concept Plus, LLC

76d

About The Position

Concept Plus is seeking a highly capable, self-driven Cyber Analyst to support a critical software modernization initiative for our client. This position plays a key role in analyzing mission-focused requirements, streamlining processes, and enhancing decision-making for operations. As the strategic link between operational objectives and technology solutions, the Cyber Analyst will translate complex business needs into actionable insights and support the successful execution of priorities—all while ensuring alignment with client compliance standards. This role operates within a collaborative Agile and DevSecOps framework to ensure secure, timely, and iterative delivery of capabilities. The ideal candidate thrives in a fast-paced, evolving environment and brings a deep understanding of both business processes and technological integration.

Requirements

• US Citizen
• Bachelor’s Degree in an IT related field
• Active Government Clearance (Or ability to receive one)
• DoD 8570 Information Assurance Technician (IAT) Level III certification (Certified Information Systems Security Professional (CISSP), CASP CE, CISA or CCNP)
• 8+ years of experience as Cyber Analyst
• 5+ years in DoD Environment
• 8+ Years Experience with the Risk Management Framework Process
• 8+ Years Experience operating the Enterprise Mission Assurance Support Service Application (eMASS)
• DOD/Government contracting experience, Government IT systems experience preferred

Responsibilities

• Work closely with technical teams to implement secure system improvements that meet DoD cybersecurity standards.
• Monitor and evaluate project progress, providing actionable reports to leadership and government officials.
• Communicate with team, customers, and stakeholders in a clear, concise, timely, and professional manner.
• Manage and maintain security authorization packages within the DoD RMF lifecycle.
• Ensure the confidentiality, integrity, and availability of systems through compliance with NIST 800-53 controls and DoDI 8500 series.
• Draft and maintain documentation including System Security Plans (SSPs), POA&Ms, and Continuous Monitoring strategies.
• Support system assessments, vulnerability scanning, and remediation efforts using tools like SonarQube, Checkmarx, Trivy, Dependency Track, eMASS, and Nessus.
• Support system assessments, vulnerability scanning, and remediation efforts relating to DISA STIGs.
• Interface with government security officials (e.g., ISSMs, AO representatives) to support audits, inspections, and reviews.
• Coordinate security engineering input into system designs and control implementation.
• Track and respond to cybersecurity incidents and ensure timely reporting and recovery efforts.
• Participate in Agile/DevSecOps development cycles, ensuring security is integrated from concept to deployment.
• Assist with personnel security awareness, training, and insider threat mitigation.
• Adhere to the DoD cybersecurity policy requirements set forth in DoDI 8500.01, 'Cybersecurity,' and DoDI 8510.01, 'Risk Management Framework (RMF) for DoD Information Technology (IT)' and their successors.

What This Job Offers

• Education Level: Bachelor's degree