Cyber Security Analyst, Journeyman (PMA 271)

Davis Defense Group•California, MD

3d•Onsite

About The Position

This position is for a Cyber Security Analyst, Journeyman (PMA 271) at Davis Defense Group, Inc., a Women-Owned Small Business (WOSB) supporting the Department of Defense since 2002. The role involves ensuring compliance with DoD cybersecurity policy and technical solutions, working within USSTRATCOM and Nuclear, Command, Control, and Communications (NC3) cybersecurity methodologies. The analyst will lead or participate in teams to achieve and maintain system Authority to Operate (ATO) and other applicable cybersecurity policies. This is a full-time, exempt, on-site position located in Patuxent River, MD, requiring a Secret clearance, with Top Secret preferred. The work environment is a fast-paced office demanding attention to detail, professionalism, and leadership, supporting the E-130J Pheonix II and/or the E-6B aircraft and related systems for the U.S. Navy's TACAMO mission.

Requirements

Minimum of 3 years of combined experience performing duties described in the functional description.
Level 2 certifications (IAM II and or IAT II) under DoD 8140 (or ability to obtain within 6 months of filling the position).

Nice To Haves

Experienced in the design, analysis and fielding of secure system architectures, software and networks.
Advanced knowledge of DOD Risk Management Framework (RMF).
Advanced knowledge of DOD cybersecurity policy or technical cybersecurity solutions.
Experience with CISCO routers and switches.
Experience with Windows and Linux operating systems.
Demonstrated work Experience with usage of Assurance Compliance Assessment Solution (ACAS).
Demonstrate work experience with mitigating STIG findings and/or assistance with mitigation statements.
Experience with Enterprise Mission Assurance Support System (eMASS).
Experience with Vulnerability Remediation Asset Manager (VRAM).
Experience with Microsoft Office Tools including Word, Excel, PowerPoint and Visio.

Responsibilities

Planning, implementing, upgrading, or monitoring security measures for the protection of computer networks, systems, and information.
Supporting the certification process and testing in accordance with the Risk Management Framework (RMF) and National Institute of Standards and Technology (NIST) policy.
Preparing RMF documentation for HW, SW, and facilities.
Providing analysis and evaluation to design, implement, test, and field secure systems, networks, and architectures.
Enforcing information systems security policies ensuring system security requirements are addressed during all phases of the Information System (IS) life cycle.
Evaluating and recommending actions in the prioritization and deconfliction of system security engineering requirements.
Identifying vulnerabilities and deficiencies and providing recommended actions and risk mitigation steps.
Implementing and ensuring information systems security policies and security requirements are addressed during all phases of the acquisition and Information System (IS) lifecycle.
Assessing system vulnerabilities for security risks and proposing and implementing risk mitigation strategies.
Assisting the government in preparing documentation supporting Authority to Operate (ATO) requirements for developmental hardware, software, and facilities.
Supporting system security engineering, integration management solutions, and mitigation strategies to reduce cyber-attacks risk.
Tracking and monitoring Plan of Action and Milestones (POA&Ms) for IT system accreditation.