Cybersecurity Analyst

JT4•Magna, UT

1d•Onsite

About The Position

A Cybersecurity Analyst performs a variety of cybersecurity tasks in monitoring information systems and securing the Information Technology (IT) infrastructure operational environment to include developing and updating system security plans (SSPs), developing plans of action and milestones (POA&Ms), managing and controlling changes to the systems, conducting audits, providing incident response, vulnerability assessments, and assessing the security impact of security and non-security-relevant changes. Work is at an intermediate level, involving managing deadlines, and cybersecurity engineering support for members of development, sustainment, or operations and maintenance team.

Requirements

A bachelor's degree (master's degree preferred) in Computer / Information Technology / Information Assurance
DoD 8570.01-M, IAT Level III compliance
A Security+ certification
Other industry standard certificates such as CASP+CE, CCNP Security, CISA, CISSP, GCED, or GCIH
CEH, CCNA, and CySA+ are required for this position.
Must possess seven (7) years of experience in technology or related area.
Conceptual knowledge of RMF process, eMASS, ACAS, SCAP, STIG, Cyber Risk Assessments (CRA), Cyber Table Top (CTT) or related process
Robust conceptual and practical understanding of IT infrastructure designs, technologies, products, and services
Experience supporting various system configurations such as standalone, local area networks (LANs), and wide area networks (WANs)
Experience formulating and/or interpreting cyber threat analysis of adversary techniques, tactics, and procedures used to disrupt computer networks
Excellent written and verbal communication skills, analytical ability, judgment, and the ability to work effectively with the customer and Cybersecurity Engineering Support Team
Ability to plan, organize, and work under strict deadlines.
Experience with planning, designing, executing, and assessing discussion-based exercises.
U.S. citizenship
Eligible for a government security clearance

Nice To Haves

Experience utilizing the Assured Compliance Assessment Solution (ACAS) (Tenable SecurityCenter/Nessus) to conduct vulnerability assessments, analyze scan findings, and generate actionable compliance reports.
Experience administering a unit-level TEMPEST program, ensuring local compliance with DoD and national TEMPEST standards.
Experience directing and mentoring Information System Security Officers (ISSOs) and cybersecurity specialists in daily compliance, assessment, and authorization activities.
Safety Trained Supervisor (STS) Certification.
Advanced Microsoft Excel skills with proven experience manipulating large technical datasets, tracking POA&Ms/vulnerability metrics, and designing interactive executive dashboards.
Experience establishing standard operating procedures (SOPs), system interconnection agreements (ISA/MOU), and continuous monitoring strategies.
Experience coordinating continuous monitoring, incident handling, forensic triage, and audit log analysis across diverse IT/cloud environments.
Experience developing and maintaining System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms).
Certified Ethical Hacker (Master) or Certified Enterprise Risk Professional (CEH/ CERP).
Master's degree
Advanced Microsoft Excel skills
Experience with planning, designing, executing, and assessing discussion-based exercises.

Responsibilities

Interface with the Authorizing Official (AO) and the Security Control Assessor (SCA) for coordination of Authorization to Operate (ATO) packages
Manage multiple system packages throughout the ATO process
Conduct research and reference reading in obtaining technical information
Keep informed of currently approved standards, codes, and procedures applied to cybersecurity specialty
Perform systems engineering activities in the areas of Cybersecurity/Information Assurance (IA)/System Security Engineering (SSE) and security assessment and authorization (A&A) in accordance with NIST SP 800-53 Risk management Framework (RMF)
Apply risk management concepts to mitigate vulnerabilities in system security architectures
Interface with the Information System Security Manager (ISSM), program managers, system stakeholders, and external contractors to coordinate cybersecurity requirements and architecture flow down from the system level to individual elements of the system
Assist in preparation of reports, correspondence, or technical studies
Perform other job-related duties, as required.
Each employee must read, understand and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job.