Cyber Network Defense Analyst

TIME Systems•Jb Andrews, MD

1d•Onsite

About The Position

TIME Systems is seeking a Cyber Network Defense Analyst for its Cybersecurity Operations team supporting the Air Force National Capital Region Information Technology Services program at Joint Base Andrews, Maryland. The selected candidate will augment the 844th Communications Group in implementing Department of Defense, Department of the Air Force, and Air Force District of Washington cybersecurity policies, programs, and initiatives. The role supports the Air Force District of Washington Mission Defense Team in conducting Defensive Cyberspace Operations – Internal Defensive Measures, Assessment and Authorization, Risk Management Framework activities, cyber network defense, incident response, vulnerability and compliance management, and continuous monitoring across the AFDW portion of the Air Force Information Network. The analyst works with cybersecurity personnel, system administrators, network engineers, system owners, and Government leadership to identify cybersecurity risks, assess security controls, investigate threats, coordinate remediation, and protect mission-relevant systems and Key Terrain in Cyberspace.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related technical discipline, with less than two years of prior relevant experience; additional years of applicable professional experience may be accepted in lieu of a degree.
Active DoD Secret Security Clearance.
Current CompTIA Security+ CE or higher certification meeting applicable DoD cybersecurity workforce requirements.
Ability to meet applicable DoD 8140 qualification requirements for the assigned cybersecurity work role.
Experience or working knowledge of ACAS vulnerability scanning and analysis.
Experience with HBSS/ePO or comparable DoD endpoint security and compliance technologies.
Experience conducting DISA STIG assessments, STIG auditing, and configuration compliance reviews.
Experience using STIG Viewer and reviewing security configuration findings.
Working knowledge of POA&Ms and vulnerability remediation processes.
Understanding of RMF and security control assessment processes.
Ability to review and assess RMF security controls and associated technical evidence.
Understanding of cybersecurity incident response and Computer Network Defense principles.
Working knowledge of vulnerability management, security compliance, and continuous monitoring concepts.
Proficiency with Microsoft Excel for cybersecurity tracking, analysis, metrics, and reporting.
Strong analytical, troubleshooting, documentation, and organizational skills.
Ability to evaluate cybersecurity findings and communicate risk-based remediation recommendations.
Excellent written and verbal communication skills.
Ability to brief cybersecurity status, findings, risk, and recommendations to high-level Government leadership and stakeholders.
Ability to work independently and collaboratively in a fast-paced, mission-critical cybersecurity environment.

Nice To Haves

Experience supporting USAF, DoD, DISA, AFDW, or other federal government cybersecurity environments.
Previous experience supporting a Mission Defense Team or Defensive Cyberspace Operations mission.
Familiarity with Defensive Cyberspace Operations – Internal Defensive Measures.
Familiarity with eMASS, including support for RMF authorization packages, security controls, POA&Ms, and continuous monitoring activities.
Experience using SCAP Compliance Checker, HBSS/ePO, ACAS, Nessus, or other enterprise cybersecurity management and assessment tools.
Ability to address, implement, review, and assess RMF security controls and provide supporting technical evidence.
Experience supporting ATO packages, Assessment and Authorization activities, security control assessments, and continuous authorization efforts.
Knowledge of NIST SP 800-53, DISA STIGs, DoD cybersecurity policies, and Air Force cybersecurity requirements.
Experience supporting Computer Network Defense, incident response, cybersecurity investigations, or network security monitoring.
Understanding of Mission Relevant Terrain in Cyberspace and Key Terrain in Cyberspace concepts.
Experience reviewing or coordinating firewall rule changes and network security requirements.
Familiarity with Data Loss Prevention technologies, policies, or waiver processes.
Ability to communicate risk-based recommendations to technical and non-technical stakeholders.
Understanding of automation tools and scripting technologies, including PowerShell, to support cybersecurity operations.
Experience using Nessus/ACAS APIs, PowerShell, or other automation capabilities to optimize vulnerability scanning, analysis, reporting, or compliance activities.
Experience developing cybersecurity dashboards, metrics, technical reports, and executive-level briefings.
Demonstrated ability to collaborate across cybersecurity, network engineering, system administration, and operations teams supporting mission-critical enterprise environments.

Responsibilities

Facilitate Assessment and Authorization efforts for AFDW enclaves, systems, and supporting infrastructure.
Support the AFDW Mission Defense Team in performing Defensive Cyberspace Operations – Internal Defensive Measures across the AFDW portion of the Air Force Information Network.
Conduct and support active and passive DCO-IDM activities to monitor, audit, detect, report, analyze, and mitigate cybersecurity threats.
Support identification and protection of Mission Relevant Terrain in Cyberspace and Key Terrain in Cyberspace associated with critical Air Force missions.
Analyze cybersecurity events, network activity, vulnerabilities, system configurations, and other security data to identify potential threats, weaknesses, and mission impact.
Support Computer Network Defense operations and responses to computer security incidents, Information Condition level changes, and Classified Message Incidents.
Coordinate incident response activities with network teams, system administrators, cybersecurity engineers, and Government stakeholders.
Support development, implementation, and management of cybersecurity policies, programs, procedures, and compliance initiatives.
Perform and review vulnerability assessments using ACAS and applicable vulnerability management technologies.
Support endpoint security and compliance activities using HBSS/ePO or applicable enterprise endpoint security platforms.
Conduct and review DISA STIG assessments using STIG Viewer and applicable compliance tools.
Review SCAP Compliance Checker results and secure configuration baselines to identify system configuration deficiencies.
Develop, maintain, review, and track POA&Ms for cybersecurity deficiencies and RMF requirements.
Review and assess RMF security controls and supporting technical evidence to determine implementation effectiveness and compliance.
Assist system owners and technical teams in identifying, documenting, and resolving security control deficiencies.
Support system authorization, accreditation, continuous monitoring, and cybersecurity inspection activities.
Coordinate firewall rule changes, reviews, and approvals with applicable organizations and stakeholders.
Support cybersecurity review and coordination of DLP waivers.
Develop cybersecurity metrics, status reports, compliance documentation, technical findings, and executive-level briefings.
Use Microsoft Excel to track cybersecurity findings, vulnerabilities, POA&Ms, security controls, remediation activities, and operational metrics.
Brief cybersecurity posture, risks, findings, and remediation status to high-level Government leadership and program stakeholders.
Translate technical cybersecurity findings into clear, actionable, risk-based recommendations for technical and non-technical audiences.
Ensure compliance with applicable DoD, Air Force, AFDW, DISA, RMF, and DoD 8140 cybersecurity requirements.