Cybersecurity Analyst III - CSET Lead

JT4 • Edwards AFB, CA

3d • $120,000 - $150,000 • Onsite

About The Position

JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force and Navy under the Joint Range Technical Services Contract. The Cybersecurity Analyst III works with a team to provide cybersecurity support to Department of War (DoW) systems within the Southwestern Test Ranges. The role analyzes, designs, develops, and implements security controls and policies to mitigate threats and improve system resiliency, applying current DoW and industry standards, practices, trends, threats, and vulnerability knowledge throughout each assigned system’s development lifecycle.

This intermediate-level role manages cybersecurity deadlines and provides engineering support to development, sustainment, and operations and maintenance teams. The analyst coordinates Authorization to Operate (ATO) packages and manages multiple system packages through the ATO process, working with Authorizing Officials, Security Control Assessors, Information System Security Managers, program managers, system stakeholders, contractors, engineers, administrators, and operators. The Section Lead also leads and mentors a team of senior and junior cybersecurity analysts, manages the performance and prioritization of a team of approximately ten analysts, and performs other lead duties as assigned.

The position supports Risk Management Framework (RMF) assessment and authorization activities, including documenting System Security Plans and Plans of Action and Milestones in eMASS; documenting system designs, configurations, procedures, compliance status, and mitigations; assessing security impacts of changes; and supporting testing, compliance, sustainment, vulnerability and risk management, and systems engineering. Work is performed in a typical office environment, with routine travel to remote company locations and occasional field work or overnight assignments. Occasional lifting up to 20 pounds, constant sitting and computer use, and sustained visual, communication, and mental attention are required.

Requirements

• Bachelor’s degree in Computer, Information Technology, or Information Assurance; a master’s degree is preferred.
• DoD 8570.01-M IAT Level III compliance.
• Security+ certification and industry-standard certifications such as CASP+ CE, CCNP Security, CISA, CISSP, GCED, or GCIH.
• CEH, CCNA, and CySA+ are required.
• Seven years of experience in technology or a related area.
• Conceptual knowledge of the RMF process, eMASS, ACAS, SCAP, STIG, Cyber Risk Assessments, Cyber Table Top, or related processes.
• Robust conceptual and practical understanding of IT infrastructure designs, technologies, products, and services.
• Experience supporting standalone, LAN, and WAN system configurations.
• Experience formulating or interpreting cyber threat analyses of adversary techniques, tactics, and procedures used to disrupt computer networks.
• Excellent written and verbal communication skills, analytical ability, judgment, and ability to work effectively with customers and the Cybersecurity Engineering Support Team.
• Ability to plan, organize, and work under strict deadlines.
• Experience planning, designing, executing, and assessing discussion-based exercises.
• Valid state-issued driver’s license.
• Ability to obtain and maintain a security clearance.
• U.S. citizenship.

Nice To Haves

• Master’s degree.
• Certified Ethical Hacker (Master) or Certified Enterprise Risk Professional (CEH/CERP).

Responsibilities

• Coordinate Authorization to Operate packages with the Authorizing Official and Security Control Assessor, and manage multiple system packages throughout the ATO process.
• Conduct research and reference reading to obtain technical information, and stay informed about approved cybersecurity standards, codes, and procedures.
• Perform cybersecurity, information assurance, system security engineering, and security assessment and authorization activities in accordance with NIST SP 800-53 and the Risk Management Framework.
• Apply risk management concepts to mitigate vulnerabilities in system security architectures.
• Coordinate cybersecurity requirements and architecture flow-down with Information System Security Managers, program managers, system stakeholders, and external contractors.
• Assist with reports, correspondence, and technical studies, and perform other job-related duties as required.
• Analyze, design, develop, and implement security controls and policies to mitigate cybersecurity threats and improve system resiliency.
• Communicate and work effectively with customers and cybersecurity professionals to ensure operations comply with DoW cybersecurity policies and procedures.
• Clarify DoW, branch-of-service, and JT4 policies and produce actionable requirements for systems engineers, system administrators, program managers, and operators.
• Lead and mentor senior and junior analysts in RMF assessment and authorization processes, including documentation of SSPs and POA&Ms in eMASS.
• Document system designs, configurations, operational procedures, compliance status, and risk mitigations to support informed security risk decisions.
• Notify system administrators, program managers, ISSOs, and ISSMs about changes that may affect security posture, findings, and required mitigations.
• Support cybersecurity activities including testing, mitigation, annual compliance, sustainment, vulnerability and risk management, and systems engineering.
• Lead analysts and system administrators in cybersecurity engineering support to ensure systems are engineered in accordance with DoDI 8510.01.
• Formulate or interpret cyber threat analyses of adversary techniques, tactics, and procedures used to disrupt computer networks.
• Support security impact analyses, cybersecurity tabletop exercises, risk management boards, and change control boards.
• Assist JT4 leadership in planning, designing, executing, and assessing discussion-based exercises and other cybersecurity risk analyses.
• Liaise with senior USAF and JT4 leadership, including the 412 TENG ISSM, DT&E SCA and SCAR Team, and internal and external program managers.
• Manage the performance, tasking, and prioritization of approximately ten cybersecurity analysts to ensure timely project completion and customer satisfaction.
• Perform Section Lead duties as defined by the Branch Supervisor and Department Manager, and other related lead duties as directed.
• Read, understand, and implement applicable operational, safety, quality, and environmental requirements.

Benefits

• Medical insurance active on Day 1
• Dental insurance active on Day 1
• Vision insurance active on Day 1
• Life insurance
• Health Savings Accounts and Flexible Spending Accounts
• Disability insurance
• Paid Time Off
• 401(k) plan with employer match of 50%, up to an 8% contribution, and 100% immediate vesting
• Tuition reimbursement

What This Job Offers

• Job Type: Full-time
• Career Level: Senior