Cybersecurity Analyst I

JT4•Edwards AFB, CA

2d•Onsite

About The Position

JT4, LLC provides engineering and technical support to western U.S. test ranges under the Joint Range Technical Services Contract. The Cybersecurity Analyst I works under close supervision to perform fundamental cybersecurity tasks and help secure information systems and maintain the IT infrastructure operational environment. The position is an entry-level role supporting development, sustainment, or operations and maintenance teams and involves working to deadlines. The role supports cybersecurity for Department of War (DoW) systems at the U.S. Air Force’s 412th Test Wing at Edwards Air Force Base. The analyst evaluates and implements security controls and policies to mitigate threats and improve system resilience, and applies current DoW and industry cybersecurity policies, practices, trends, threats, and vulnerability knowledge throughout assigned systems’ development lifecycles. The analyst works with teammates, program managers, system administrators, engineers, customers, and cybersecurity leadership. The analyst supports Risk Management Framework (RMF) assessment and authorization activities, system security documentation, vulnerability and risk management, compliance, testing, mitigation, and cybersecurity engineering. Work includes recording system designs, configurations, operational procedures, compliance status, and risk mitigations so security assessors and authorizing officials can make informed risk decisions. The role requires a bachelor’s degree or equivalent academic/technical training or certification, at least one year of relevant experience, specified DoD 8570.01-M compliance and certifications, U.S. citizenship, a valid state-issued driver’s license, and the ability to obtain and maintain a security clearance. Work is performed in a typical office environment with no unusual hazards. Routine travel to remote company work locations and work in a field environment, sometimes with overnight assignments, may be required. Occasional lifting up to 20 pounds, constant sitting and computer-terminal use, and frequent visual, speech, hearing, and mental alertness demands are specified.

Requirements

Bachelor’s degree in Computer/Information Technology/Information Assurance, or equivalent academic/technical training/certification.
At least one year of experience in computer systems security and/or a related area of expertise.
Compliant with, or able to become compliant with, DoD 8570.01-M IAT Level I requirements.
Possess Security+ certification or complete Security+ within a designated timeframe.
Possess at least one of the following certifications: A+ CE, CCNA-Security, CND, Network+ CE, or SSCP.
Conceptual knowledge of the RMF process, eMASS, ACAS, SCAP, STIG, Cyber Risk Assessment, and Cyber Table Top or related processes.
Robust conceptual and practical understanding of IT infrastructure designs, technologies, products, and services.
Experience supporting standalone, LAN, and WAN system configurations.
Strong communication skills, analytical ability, good judgment, and ability to work effectively with customers and the Cybersecurity Engineering Support Team.
Experience planning, designing, executing, and assessing discussion-based exercises.
Ability to plan, organize, and work under strict deadlines.
Valid state-issued driver’s license.
Ability to obtain and maintain a security clearance.
U.S. citizenship.
Ability to meet the role’s physical and work-environment demands, including occasional lifting up to 20 pounds, constant sitting and computer-terminal use, and communication and mental-alertness demands.
Ability to travel routinely to remote company locations and work in field environments, with occasional overnight assignments if required.

Nice To Haves

Certified Ethical Hacker (CEH) certification.

Responsibilities

Conduct research and reference reading to assist higher-level Cybersecurity Analysts in obtaining technical information.
Keep informed of current approved standards, codes, and procedures relevant to cybersecurity.
Perform cybersecurity, Information Assurance, System Security Engineering, and security assessment and authorization systems engineering activities in accordance with NIST SP 800-53 RMF.
Apply manager-approved risk management concepts to mitigate vulnerabilities in system security architectures.
Coordinate cybersecurity requirements and architecture flow-down with the ISSM, program managers, system stakeholders, and external contractors.
Assist in preparing reports, correspondence, and technical studies.
Evaluate and implement security controls and policies to mitigate cybersecurity threats and improve system resiliency.
Research DoW, service-branch, and JT4 policies and, with senior-team assistance, produce actionable requirements for systems engineers, system administrators, program managers, and operators.
Support RMF Assessment and Authorization processes, including Steps 0 through 4 and Step 6, and document SSPs and POA&Ms in eMASS.
Document system design, configurations, operational procedures, compliance and non-compliance status, and existing risk mitigations for cybersecurity risk decision-makers.
Notify system administrators, program managers, ISSOs, and ISSMs about changes affecting security posture, findings, and mitigations requiring implementation.
Support IA/cybersecurity testing, mitigation, annual compliance, sustainment, vulnerability and risk management, and systems engineering activities.
Provide cybersecurity engineering support, with guidance from senior team members, to ensure systems are engineered in accordance with DoDI 8510.01.
Contribute to risk analyses, including security impact analyses, cybersecurity tabletop exercises, risk management boards, and change control boards.
Participate in discussion-based exercises and other cybersecurity risk analysis activities as required.
Perform other job-related duties as required.
Read, understand, and implement applicable operational, safety, quality, and environmental requirements, plans, procedures, and policies.