Cybersecurity Analyst II

JT4 • Edwards AFB, CA

4d • $97,000 - $125,000 • Onsite

About The Position

JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force and Navy under the Joint Range Technical Services Contract (J-Tech II). The Cybersecurity Analyst II provides cybersecurity support to DoW systems within the USAF’s 412th Test Wing at Edwards Air Force Base, working with a motivated team to help secure information systems and IT infrastructure.

This intermediate-level role involves cybersecurity monitoring and engineering support for development, sustainment, and operations and maintenance teams. The analyst analyzes, proposes, and implements security controls and policies to mitigate threats and improve system resilience, applying current DoW and industry standards, policies, best practices, trends, threats, and vulnerabilities throughout each assigned system’s development lifecycle.

The position supports Risk Management Framework (RMF) assessment and authorization activities, including preparing and maintaining System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms) in eMASS. It includes managing system changes, conducting audits and vulnerability assessments, responding to incidents, assessing security impacts, documenting system configurations and compliance status, and coordinating findings and mitigation actions with system administrators, program managers, ISSOs, ISSMs, engineers, operators, customers, and other stakeholders. The analyst may work independently or with guidance from senior team members and must communicate professionally while managing deadlines.

Work is performed in a typical office environment, with routine travel to remote company work locations and possible field assignments with occasional overnight stays. Occasional lifting up to 20 pounds, constant sitting and computer use, and sustained visual, communication, hearing, and mental alertness are required.

Requirements

• Bachelor’s degree in Computer/Information Technology or Information Assurance focused on cybersecurity, or equivalent academic, technical training, or certification.
• Three or more years of experience in computer systems security or a related area of expertise.
• Compliance with, or ability to become compliant with, DoD 8570.01-M IAT Level II requirements.
• Security+ certification or completion within the designated timeframe.
• One of the following certifications: CCNA Security, CySA+, GICSP, GSEC, CND, or SSCP.
• Conceptual knowledge of RMF, eMASS, ACAS, SCAP, STIG, Cyber Risk Assessments, Cyber Table Tops, or related processes.
• Robust conceptual and practical understanding of IT infrastructure designs, technologies, products, and services.
• Experience supporting standalone, LAN, and WAN system configurations.
• Experience formulating or interpreting cyber threat analyses involving adversary techniques, tactics, and procedures used to disrupt computer networks.
• Excellent written and verbal communication, analytical ability, judgment, and ability to work effectively with customers and the Cybersecurity Engineering Support Team.
• Ability to plan, organize, and work under strict deadlines.
• Experience planning, designing, executing, and assessing discussion-based exercises.
• Valid state-issued driver’s license.
• Ability to obtain and maintain a security clearance.
• U.S. citizenship.

Nice To Haves

• Certified Ethical Hacker (CEH) certification.
• Certified Enterprise Risk Professional (CERP) certification.

Responsibilities

• Conduct technical research and reference reading; stay informed about approved cybersecurity standards, codes, and procedures.
• Perform cybersecurity, Information Assurance, System Security Engineering, and security assessment and authorization engineering activities in accordance with NIST SP 800-53 RMF and DoDI 8510.01.
• Apply risk management concepts to mitigate vulnerabilities in system security architectures.
• Coordinate cybersecurity requirements and architecture flow-down with the ISSM, program managers, system stakeholders, and external contractors.
• Assist in preparing reports, correspondence, and technical studies.
• Analyze, propose, and implement security controls and policies to mitigate threats and improve system resilience.
• Clarify DoW, service-branch, and JT4 policies and produce actionable requirements for systems engineers, system administrators, program managers, and operators.
• Support RMF assessment and authorization processes, including Steps 0 through 4 and Step 6, and document SSPs and POA&Ms in eMASS.
• Document system design, configurations, operational procedures, compliance and non-compliance status, and existing risk mitigation techniques to support cybersecurity risk decisions.
• Notify responsible system administrators, program managers, ISSOs, and ISSMs about changes affecting security posture, findings, and required mitigations.
• Support IA/cybersecurity testing, mitigation, annual compliance, sustainment, vulnerability and risk management, and systems engineering activities.
• Provide cybersecurity engineering support to customers to help ensure systems comply with DoDI 8510.01.
• Apply knowledge of adversary tactics, techniques, and procedures used to disrupt computer networks.
• Conduct risk analysis activities such as security impact analyses, cybersecurity tabletop exercises, risk management boards, and change control boards.
• Participate in discussion-based exercises and other cybersecurity risk analysis activities as required.
• Perform other job-related duties as required.
• Read, understand, and implement applicable operational, safety, quality, and environmental requirements.

Benefits

• Medical insurance, active on Day 1.
• Dental insurance, active on Day 1.
• Vision insurance, active on Day 1.
• Life insurance.
• Health Savings Accounts and Flexible Spending Accounts.
• Disability insurance.
• Paid Time Off.
• 401(k) plan options with employer match: 50% match up to an 8% contribution, with 100% immediate vesting.
• Tuition reimbursement.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level