Cyber Network Defense Analyst

TIME Systems • Jb Andrews, MD

5d • Onsite

About The Position

TIME Systems is seeking a Cyber Network Defense Analyst to join our Cybersecurity Operations team supporting the Air Force National Capital Region Information Technology Services (AFNCR IT Services / AFNCRIT) program at Joint Base Andrews, Maryland. The selected candidate will augment the 844th Communications Group (844 CG) in implementing Department of Defense (DoD), Department of the Air Force, and Air Force District of Washington (AFDW) cybersecurity policies, programs, and initiatives. This role will support the AFDW Mission Defense Team (MDT) in conducting Defensive Cyberspace Operations – Internal Defensive Measures (DCO-IDM), Assessment and Authorization (A&A), Risk Management Framework (RMF) activities, cyber network defense, incident response, vulnerability and compliance management, and continuous monitoring across the AFDW portion of the Air Force Information Network (AFIN). The Cyber Network Defense Analyst will work closely with cybersecurity personnel, system administrators, network engineers, system owners, and Government leadership to identify cybersecurity risks, assess security controls, investigate threats, coordinate remediation efforts, and protect mission-relevant systems and Key Terrain in Cyberspace.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related technical discipline with less than two (2) years of prior relevant experience; additional years of applicable professional experience may be accepted in lieu of a degree.
• Active DoD Secret Security Clearance.
• Current CompTIA Security+ CE or higher certification meeting applicable DoD cybersecurity workforce requirements.
• Ability to meet applicable DoD 8140 qualification requirements for the assigned cybersecurity work role.
• Experience or working knowledge of Assured Compliance Assessment Solution (ACAS) vulnerability scanning and analysis.
• Experience with HBSS/ePO or comparable DoD endpoint security and compliance technologies.
• Experience conducting DISA STIG assessments, STIG auditing, and configuration compliance reviews.
• Experience utilizing STIG Viewer and reviewing security configuration findings.
• Working knowledge of Plans of Action and Milestones (POA&Ms) and vulnerability remediation processes.
• Understanding of the Risk Management Framework (RMF) and security control assessment processes.
• Ability to review and assess RMF security controls and associated technical evidence.
• Understanding of cybersecurity incident response and Computer Network Defense principles.
• Working knowledge of vulnerability management, security compliance, and continuous monitoring concepts.
• Proficiency with Microsoft Excel for cybersecurity tracking, analysis, metrics, and reporting.
• Strong analytical, troubleshooting, documentation, and organizational skills.
• Ability to evaluate cybersecurity findings and communicate appropriate risk-based remediation recommendations.
• Excellent written and verbal communication skills.
• Ability to effectively brief cybersecurity status, findings, risk, and recommendations to high-level Government leadership and stakeholders.
• Ability to work independently and collaboratively in a fast-paced, mission-critical cybersecurity environment.

Nice To Haves

• Experience supporting United States Air Force (USAF), Department of Defense (DoD), DISA, AFDW, or other federal government cybersecurity environments.
• Previous experience supporting a Mission Defense Team (MDT) or Defensive Cyberspace Operations mission.
• Familiarity with Defensive Cyberspace Operations – Internal Defensive Measures (DCO-IDM).
• Familiarity with eMASS, including supporting RMF authorization packages, security controls, POA&Ms, and continuous monitoring activities.
• Experience utilizing SCAP Compliance Checker (SCC), HBSS/ePO, ACAS, Nessus, or other enterprise cybersecurity management and assessment tools.
• Ability to address, implement, review, and assess RMF security controls and provide supporting technical evidence.
• Experience supporting Authorization to Operate (ATO) packages, Assessment and Authorization activities, security control assessments, and continuous authorization efforts.
• Knowledge of NIST SP 800-53, DISA STIGs, DoD cybersecurity policies, and Air Force cybersecurity requirements.
• Experience supporting Computer Network Defense, incident response, cybersecurity investigations, or network security monitoring activities.
• Understanding of Mission Relevant Terrain in Cyberspace (MRT-C) and Key Terrain in Cyberspace (KT-C) concepts.
• Experience reviewing or coordinating firewall rule changes and network security requirements.
• Familiarity with Data Loss Prevention (DLP) technologies, policies, or waiver processes.
• Ability to communicate risk-based recommendations to both technical and non-technical stakeholders.
• Understanding of automation tools and scripting technologies, including PowerShell, to support cybersecurity operations.
• Experience utilizing Nessus/ACAS APIs, PowerShell, or other automation capabilities to optimize vulnerability scanning, analysis, reporting, or compliance activities.
• Experience developing cybersecurity dashboards, metrics, technical reports, and executive-level briefings.
• Demonstrated ability to collaborate across cybersecurity, network engineering, system administration, and operations teams supporting mission-critical enterprise environments.

Responsibilities

• Facilitate Assessment and Authorization (A&A) efforts for AFDW enclaves, systems, and supporting infrastructure.
• Support the AFDW Mission Defense Team (MDT) in performing Defensive Cyberspace Operations – Internal Defensive Measures (DCO-IDM) across the AFDW portion of the Air Force Information Network (AFIN).
• Conduct and support active and passive DCO-IDM activities to monitor, audit, detect, report, analyze, and mitigate cybersecurity threats.
• Support identification and protection of Mission Relevant Terrain in Cyberspace (MRT-C) and Key Terrain in Cyberspace (KT-C) associated with critical Air Force missions.
• Analyze cybersecurity events, network activity, vulnerabilities, system configurations, and other security data to identify potential threats, weaknesses, and mission impact.
• Support Computer Network Defense (CND) operations and assist with responses to computer security incidents, Information Condition (INFOCON) level changes, and Classified Message Incidents (CMIs).
• Coordinate cybersecurity incident response activities with network teams, system administrators, cybersecurity engineers, and Government stakeholders.
• Support the development, implementation, and management of cybersecurity policies, programs, procedures, and compliance initiatives.
• Perform and review vulnerability assessments utilizing Assured Compliance Assessment Solution (ACAS) and applicable vulnerability management technologies.
• Support endpoint security and compliance activities utilizing HBSS/ePO or applicable enterprise endpoint security platforms.
• Conduct and review DISA Security Technical Implementation Guide (STIG) assessments using STIG Viewer and applicable compliance tools.
• Review SCAP Compliance Checker (SCC) results and secure configuration baselines to identify system configuration deficiencies.
• Develop, maintain, review, and track Plans of Action and Milestones (POA&Ms) supporting identified cybersecurity deficiencies and RMF requirements.
• Review and assess RMF security controls and supporting technical evidence to determine implementation effectiveness and compliance.
• Assist system owners and technical teams with identifying, documenting, and resolving security control deficiencies.
• Support system authorization, accreditation, continuous monitoring, and cybersecurity inspection activities.
• Coordinate with applicable organizations and stakeholders regarding firewall rule changes, reviews, and approvals.
• Support cybersecurity review and coordination of Data Loss Prevention (DLP) waivers.
• Develop cybersecurity metrics, status reports, compliance documentation, technical findings, and executive-level briefings.
• Utilize Microsoft Excel to track cybersecurity findings, vulnerabilities, POA&Ms, security controls, remediation activities, and operational metrics.
• Brief cybersecurity posture, risks, findings, and remediation status to high-level Government leadership and program stakeholders.
• Translate technical cybersecurity findings into clear, actionable, and risk-based recommendations for technical and non-technical audiences.
• Ensure compliance with applicable DoD, Air Force, AFDW, DISA, RMF, and DoD 8140 cybersecurity requirements.

Benefits

• Health Coverage: Select from three plans, including a 100% company-funded employee-only plan.
• Dental Coverage: Our dental plan offers extensive care with no annual maximum.
• Vision: Our vision plan covers regular eye exams and corrective eyewear.
• Life Insurance and AD&D and other customizable coverage options!
• 401(k) Retirement Plan
• Health Savings Account (HSA), Flexible Spending Account (FSA), Short- and Long-Term Disability Insurance, Employee Assistance Plan, and more!

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level