Cyber Security Analyst - 306211

Delaware Nation Industries • Virginia Beach, VA

2h • $105,000 - $115,000

About The Position

The ISSO / Cyber Security Analyst will support Department of War (DoW) cybersecurity compliance, Risk Management Framework (RMF) activities, and continuous monitoring for networked systems and applications. The analyst will assist with maintaining Authorization to Operate (ATO) packages; managing security documentation and evidence; reviewing Security Technical Implementation Guide (STIG) compliance; assessing vulnerabilities; and coordinating remediation activities with network, system administration, and engineering teams. The position uses Tanium to support endpoint visibility, asset and software inventory, vulnerability identification, patch-compliance monitoring, and remediation tracking. The analyst works closely with Information System Security Managers (ISSMs), ISSOs, system owners, and technical teams to maintain compliance with applicable DoD cybersecurity policies, NIST guidance, and organizational security requirements.

Delaware Nation Industries supports the Naval Surface Warfare Center Dahlgren Division Dam Neck Activity (NSWCDD DNA), providing enterprise management and technical support, including assistance with policy, procedures, seat refresh, engineering and technical solutions, and ordering in support of the Next Generation Enterprise Network (NGEN) and Naval Networking Environment (NNE) strategy.

Requirements

• DoD Top Secret security clearance.
• Cyber Security Workforce level IAM II/III certification: CASP, CISM, or CISSP.
• At least 5 years of experience in cyber security.
• Bachelor’s degree or equivalent work experience.
• Familiarity with the NIST IT Security Special Publication 800 Series, especially NIST SP 800-37 and NIST SP 800-53 revisions 4/5.
• Familiarity with forensic analysis.
• Experience as a STIG reviewer.
• Experience using Microsoft Visio and Microsoft Project.

Nice To Haves

• Familiarity with ACAS, Tanium, and Carbon Black.
• Familiarity with the Vulnerability Remediation Asset Manager (VRAM) web tool.
• Familiarity with the Continuous Monitoring and Risk Scoring (CMRS) web tool.

Responsibilities

• Monitor and assess existing Information Security Management and Security Technical Architecture, regulations, and controls, including FIPS, NIST, DISN Connection Process Guide (CPG), Navy RMF Process Guide (RPG), and Navy Testing Guidance.
• Assess proposed Information Security Management and Security Technical Architecture, regulations, and controls, including FIPS, NIST, DISN CPG, Navy RPG, and Navy Testing Guidance.
• Maintain regular meetings, notes, and informal dialogue with RDT&E CORE/LAB managers and ISSOs to communicate upcoming ISSM requirements and gather information about capability and core support requirements and trends.
• Maintain records in the Enterprise Mission Assurance Support Service (eMASS).
• Evaluate technical testing from ACAS scans, Evaluate STIG, eMASSter, and the Security Technical Implementation Guide Viewer using FMATS or other NAVSEA- or DoD-approved toolsets.
• Monitor security access, passwords, badges, and logins to help keep a site or system safe.
• Use firewalls and information security standards to help secure the organization.
• Perform security assessments, vulnerability testing, and risk analysis.
• Conduct internal and external security audits.
• Identify the cause of security breaches.
• Support RMF activities and continuous monitoring for networked systems and applications.
• Maintain ATO packages and security documentation and evidence; review STIG compliance; assess vulnerabilities; and coordinate remediation with network, system administration, and engineering teams.
• Use Tanium for endpoint visibility, asset and software inventory, vulnerability identification, patch-compliance monitoring, and remediation tracking.

Benefits

• 100% coverage of employee benefit premiums, including medical (PPO or HDHP option), vision, and dental.
• 401(k) matching.
• Short- and long-term disability.
• Pet insurance.
• Professional development and education reimbursement.
• Parking and transit benefits for NY, NJ, ATL, and DC Metro areas.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level