Cybersecurity Analyst II

JT4•Edwards AFB, CA

1d•$99,855 - $116,386•Onsite

About The Position

A Cybersecurity Analyst II performs a variety of cybersecurity tasks in monitoring information systems and securing the Information Technology (IT) infrastructure operational environment to include developing and updating system security plans (SSPs), developing plans of action and milestones (POA&Ms), managing and controlling changes to the systems, conducting audits, providing incident response, vulnerability assessments, and assessing the security impact of security and non-security-relevant changes. Work is at an intermediate level and involves managing deadlines and cybersecurity engineering support for members of development, sustainment, or operations and maintenance team. As a professional with JT4, the Cybersecurity Analyst II will be responsible for working with a motivated team to provide cybersecurity support to various DoW systems within the USAF’s 412 TW at Edwards Air Force Base. The Cybersecurity Analyst II will be required to analyze, propose, and implement security controls and policies to mitigate cybersecurity threats and improve system resiliency. With the constant evolution of the cybersecurity field, the Cybersecurity Analyst II will be required to maintain knowledge of current DoW and industry standard policies, best practices, cybersecurity trends, threats, and vulnerabilities and apply this knowledge at every step of the System Development Life Cycle for each system assigned. The Cybersecurity Analyst II will be in constant communication with teammates, program managers, system administrators, and engineers- good communication skills and professionalism are a must. Only highly motivated, passionate cybersecurity professionals need apply.

Requirements

A Bachelor’s Degree in Computer/Information Technology/Information Assurance focused on cybersecurity, or equivalent academic/technical training/certification
Three (3) or more years of experience in computer systems security, and/or related area of expertise
Compliance or ability to become compliant to DoD 8570.01-M, IAT/Level II compliance
A Security+ certification or completion within designated timeframe
One of the following certifications: CCNA Security, CySA+, GICSP, GSEC, CND or SSCP
Conceptual knowledge of RMF process, eMASS, ACAS, SCAP, STIG, Cyber Risk Assessments (CRAs), Cyber Table Top (CTT), or related process
Robust conceptual and practical understanding of IT infrastructure designs, technologies, products, and services
Experience supporting various system configurations such as standalone, local area networks (LANs), and wide area networks (WANs)
Experience formulating and/or interpreting cyber threat analysis of adversary techniques, tactics, and procedures used to disrupt computer networks
Excellent written and verbal communication skills, analytical ability, judgment, and the ability to work effectively with the customer and Cybersecurity Engineering Support Team
Ability to plan, organize, and work under strict deadlines
Experience with planning, designing, executing, and assessing discussion-based exercises
Must possess a valid, state issued driver’s license
Must be able to obtain and maintain security clearance
Must be a U.S. citizen.

Nice To Haves

Certified Ethical Hacker or Certified Enterprise Risk Professional (CEH/ CERP)

Responsibilities

Conduct research and reference reading in obtaining technical information
Keep informed of currently approved standards, codes, and procedures applied to cybersecurity specialty
Perform systems engineering activities in the areas of cybersecurity/Information Assurance (IA)/System Security Engineering (SSE), and security assessment and authorization (A&A) in accordance to NIST SP 800-53 Risk Management Framework (RMF)
Apply risk management concepts to mitigate vulnerabilities in system security architectures
Interface with the Information System Security Manager (ISSM), program managers, system stakeholders, and external contractors to coordinate cybersecurity requirements and architecture flow down from the system level to individual elements of the system
Assist in preparation of reports, correspondence, or technical studies
Perform other job-related duties, as required
Analyze, propose, and implement security controls and policies to mitigate cybersecurity threats and improve system resiliency.
Maintain knowledge of current DoW and industry standard policies, best practices, cybersecurity trends, threats, and vulnerabilities and apply this knowledge at every step of the System Development Life Cycle for each system assigned.
Be in constant communication with teammates, program managers, system administrators, and engineers.
Demonstrate strong communication skills, analytical ability, good judgment, and the ability to work effectively with the customer and fellow cybersecurity professionals to ensure JT4 and our customers operate within DoW cybersecurity policies and procedures.
Clarify DoW, branch of service, and JT4 policies, producing actionable requirements to be implemented by responsible Systems Engineers (SEs), System Administrators (SAs), Program Managers (PMs), and operators.
Support the Risk Management Framework (RMF) Assessment and Authorization processes (Steps 0 through 4 and Step 6) throughout the various systems' cybersecurity lifecycles, including documentation of RMF System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms) in the DoW's Enterprise Mission Assurance Support System (eMASS).
Document system design, configurations, operational procedures, compliance and non-compliance status, and existing risk mitigation techniques implemented so that the Security Control Assessor, Authorizing Official, and other members of cybersecurity leadership can make informed cybersecurity risk decisions.
Notify the responsible System Administrators (SAs), Program Managers (PMs), Information System Security Officers (ISSOs), and Information System Security Managers (ISSMs) of any changes that might affect security posture as well as findings and mitigations that require implementation.
Support Information Assurance/Cybersecurity (IA/CS) support activities including testing, mitigation, annual IA/CS compliance, sustainment, vulnerability and risk management, and systems engineering support.
Work independently and with guidance from senior team members to provide cybersecurity engineering support to customers to ensure systems are engineered in accordance with (IAW) DoD Instruction (DoDI) 8510.01.
Demonstrate basic understanding of adversary techniques, tactics, and procedures used to disrupt computer networks.
Demonstrate proficiency in cybersecurity risk management in support of risk analysis techniques such as security impact analyses, cybersecurity tabletop exercises, risk management boards, and change control boards.
Participate in discussion-based exercises and other forms of cybersecurity risk analysis, as required.
Read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job.