Cybersecurity Analyst II

JT4 • Edwards AFB, CA

3d • Onsite

About The Position

JT4, LLC provides engineering and technical support to western U.S. test ranges under the Joint Range Technical Services Contract. The Cybersecurity Analyst II provides cybersecurity engineering and information assurance support for Department of War systems within the U.S. Air Force’s 412th Test Wing at Edwards Air Force Base. The role analyzes, proposes, and implements security controls and policies to mitigate threats and improve system resilience, applying current DoW and industry cybersecurity standards throughout each assigned system’s development lifecycle.

At an intermediate level, the position supports monitoring and securing information systems and IT infrastructure. Work includes maintaining system security plans (SSPs) and plans of action and milestones (POA&Ms), managing system changes, conducting audits and vulnerability assessments, responding to incidents, and assessing the security impacts of changes. The analyst supports Risk Management Framework (RMF) assessment and authorization activities, documents system security and risk information, coordinates with technical and program stakeholders, and provides cybersecurity support to development, sustainment, and operations and maintenance teams. The role requires independent work as well as collaboration with senior teammates, customers, engineers, system administrators, program managers, and cybersecurity personnel.

Requirements

• Bachelor’s degree in Computer/Information Technology or Information Assurance focused on cybersecurity, or equivalent academic, technical training, or certification.
• Three or more years of experience in computer systems security or a related area of expertise.
• Compliance with, or ability to become compliant with, DoD 8570.01-M IAT Level II requirements.
• Security+ certification, or completion within the designated timeframe.
• One of the following certifications: CCNA Security, CySA+, GICSP, GSEC, CND, or SSCP.
• Conceptual knowledge of the RMF process, eMASS, ACAS, SCAP, STIG, Cyber Risk Assessments, Cyber Table Tops, or related processes.
• Robust conceptual and practical understanding of IT infrastructure designs, technologies, products, and services.
• Experience supporting system configurations such as standalone systems, LANs, and WANs.
• Experience formulating or interpreting cyber threat analyses of adversary techniques, tactics, and procedures used to disrupt computer networks.
• Excellent written and verbal communication skills, analytical ability, sound judgment, and ability to work effectively with customers and the Cybersecurity Engineering Support Team.
• Ability to plan, organize, and work under strict deadlines.
• Experience planning, designing, executing, and assessing discussion-based exercises.
• Valid state-issued driver’s license.
• Ability to obtain and maintain a security clearance.
• U.S. citizenship.

Nice To Haves

• Certified Ethical Hacker (CEH) certification.
• Certified Enterprise Risk Professional (CERP) certification.

Responsibilities

• Monitor information systems and help secure the IT infrastructure operational environment.
• Develop and update system security plans (SSPs) and plans of action and milestones (POA&Ms), including documentation in the DoW Enterprise Mission Assurance Support System (eMASS).
• Support RMF Assessment and Authorization processes, including Steps 0 through 4 and Step 6, across system cybersecurity lifecycles.
• Analyze, propose, and implement security controls and policies to mitigate cybersecurity threats and improve system resiliency.
• Manage and control system changes, conduct audits and vulnerability assessments, provide incident response, and assess security impacts of security- and non-security-relevant changes.
• Document system design, configurations, operational procedures, compliance status, and risk mitigation techniques to support informed cybersecurity risk decisions.
• Notify responsible system administrators, program managers, ISSOs, and ISSMs about changes affecting security posture, findings, and required mitigations.
• Clarify applicable DoW, service, and JT4 policies and produce actionable requirements for systems engineers, system administrators, program managers, and operators.
• Provide IA/cybersecurity testing, mitigation, annual compliance, sustainment, vulnerability and risk management, and systems engineering support.
• Apply risk management concepts and support risk analysis activities, including security impact analyses, cybersecurity tabletop exercises, risk management boards, and change control boards.
• Coordinate cybersecurity requirements and architecture flow-down with the ISSM, program managers, system stakeholders, and external contractors.
• Research technical information and remain informed about approved standards, codes, procedures, policies, best practices, trends, threats, vulnerabilities, and adversary tactics, techniques, and procedures.
• Plan, organize, execute, and assess discussion-based exercises and other cybersecurity risk analysis activities as required.
• Prepare reports, correspondence, and technical studies, and perform other job-related duties as required.
• Read, understand, and implement applicable operational, safety, quality, and environmental requirements.

Benefits

• Medical, dental, and vision insurance benefits active on Day 1.
• Life insurance.
• Health Savings Accounts and Flexible Spending Accounts.
• Disability insurance.
• Paid time off.
• 401(k) plan options with employer match: JT4 matches 50%, up to an 8% contribution.
• 100% immediate vesting.
• Tuition reimbursement.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level