Cybersecurity Analyst

Intrepid Solutions and Services, LLC•Alexandria, VA

21d•$185,000 - $225,000•Onsite

About The Position

CIS-Intrepid Solutions is hiring a Cybersecurity Analyst – Information Security System Engineer (ISSE) to support its US Army TENCAP client in Alexandria, Virginia. The role supports the Army’s effort to rapidly exploit and influence national capabilities and architectures. The position is 100% onsite, with standard Monday–Friday work hours and limited CONUS travel expected. The analyst evaluates existing and emerging TENCAP information systems and IT infrastructure for compliance with Army, Department of Defense, and federal information assurance policies and requirements. The role develops cybersecurity standards and guidance, performs risk assessments, and provides technical ISSE recommendations across the system development life cycle. It also supports Assessment and Authorization activities, security documentation and control reviews, system architecture and change management, acquisition services, and ongoing cybersecurity compliance. The role requires an active TS/SCI clearance, substantial cybersecurity experience supporting DoD or intelligence community systems and acquisition programs, and a qualifying degree and/or experience background. A baseline certification at IAM Level III or IAT Level III is required, along with compliance with applicable DoD and Army training and certification requirements.

Requirements

Active TS/SCI clearance; the employer does not sponsor an initial clearance or upgrade, and applicants without an active TS/SCI clearance are ineligible.
Bachelor’s degree in computer science, computer engineering, or a related field plus 10 years of work experience, or 15 years of work experience.
Baseline certification as stipulated in DoD Directive 8140.01, at IAM Level III or IAT Level III, and certification in accordance with DoD 8570.01.
Compliance with DoD and Army training requirements, including DoD 8140.01, DFARS 252.239.7001, and AR 25-2.
20+ years of progressively complex cybersecurity experience in designing, developing, integrating, testing, certifying, and accrediting security solutions for DoD or IC intelligence systems.
15+ years of experience applying the Risk Management Framework (ICD 503) to accreditation of DoD or IC information technology systems.
10+ years of cybersecurity experience supporting DoD acquisition programs or projects, including system security requirements development, post-Milestone B and C cyber documentation, and cybersecurity support for prototype testing.
Linux proficiency, including command-line use, Linux file systems and networking concepts, scripting and automation, and system administration.
Experience configuring network components and knowledge of secure network transport components and their configuration.
Experience supporting development, configuration, and deployment (connection approvals) of Cross Domain Solutions (CDS).
Experience with encryption, Public Key Infrastructure (PKI), Data at Rest (DAR), Data in Transit (DIT), and FIPS 140-2/3.
Experience reviewing firewall rules, including ports, protocols, services, and network traffic sources and destinations.
Experience providing cybersecurity support for Preliminary Design Reviews (PDR), Critical Design Reviews (CDR), and Final Design Reviews (FDR).
Experience with vulnerability assessment, vulnerability management, and compliance tools, including Nessus, ACAS, and SCAP.
Experience with configuration management processes.
Experience hardening systems using DISA STIGs or other department or agency hardening processes.
Experience supporting DevSecOps implementation.
Experience with NIST SP 800-53 and the RMF defined by NIST 800-37.
Experience with Assessment and Authorization processes, including steps leading up to authorization and post-authorization activities.
Experience translating policies and guidance into technical solutions.
Ability to translate and effectively present highly technical topics in accessible briefs or presentations for leadership.
Subject to investigative and assignment requirements in accordance with AR 25-2, AR 380-67, the Personnel Security Program, and related regulations.

Nice To Haves

Experience with the Cybersecurity Risk Management Construct (CSRMC).

Responsibilities

Analyze existing and emerging TENCAP information systems and IT infrastructure for compliance with Army, DoD, and federal information assurance policies, orders, tasks, and regulations.
Develop and document standards and guides for information assurance and cybersecurity solutions, including compliance, system security design, and assessments.
Conduct and document risk assessments for unclassified and classified systems, identifying risks, probability of occurrence, impact, and mitigating safeguards.
Provide cybersecurity-ISSE recommendations and documentation throughout the system development life cycle, emphasizing technical aspects.
Provide cybersecurity-ISSE recommendations at meetings, briefings, and design reviews.
Provide Assessment and Authorization expertise.
Develop and review System Security Plans (SSPs).
Review security controls and provide updates.
Review and technically validate findings in Security Assessment Reports (SARs).
Conduct technical evaluations of Plans of Action and Milestones (POA&Ms).
Assess hardware and software cybersecurity effectiveness in support of system architecture design or changes and the Program Change Control Management process.
Help ensure systems remain compliant with cybersecurity policies.
Provide cybersecurity-ISSE guidance in support of acquisition services.

Benefits

401(k) with company matching
Dental insurance
Medical insurance
Health Savings Account option
Flexible Spending
Vision insurance
Life and disability insurance
Ancillary offerings, including hospital indemnity, accident, critical illness, and pet insurance
Paid Time Off
Holiday pay