Cybersecurity Analyst - Contingent
About The Position
CRG is seeking two Cybersecurity Analysts to serve as technical subject matter experts (SMEs) supporting the cybersecurity evaluation of product submissions to the DCMA Blue List Program. This is a distinct role from the IT Cybersecurity Specialist position — the Cybersecurity Analyst is a policy and technical assessment function, not a ServiceNow platform security role. Analysts provide advisory support on cybersecurity requirements, technical standards, and assessment methodologies applicable to Blue List technologies, evaluating submitted assessments for embedded systems, firmware, wireless communications, supply chain security, and related component-level risks. The ideal candidate will have experience interpreting penetration testing results, vulnerability assessments, and firmware analyses, and translating them into clear technical risk recommendations for Government decision-makers.
Requirements
- Bachelor's degree required in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline
- Active certification required: DoW 8570/8140 IAM or IAT Level II or III (e.g., CISSP, CISM, or CompTIA Security+)
- Must be a U.S. citizen with a favorably adjudicated Tier 3 (ADP/IT-II) investigation on file in DISS at the time of offer
Nice To Haves
- Minimum of five (5) years of practical experience
Responsibilities
- Serve as technical subject matter experts (SMEs) supporting the cybersecurity evaluation of product submissions
- Provide technical expertise and advisory support to the Government Blue List Program regarding cybersecurity requirements, technical standards, risk management, and assessment methodologies applicable to Blue List technologies
- Possess demonstrated knowledge of cybersecurity principles applicable to embedded systems, software, firmware, wireless communications, networking, encryption, authentication, supply chain security, and other technologies relevant to the Blue List Program
- Possess experience interpreting cybersecurity assessment methodologies, penetration testing results, vulnerability assessments, software assurance evaluations, and firmware analyses sufficient to evaluate cybersecurity risks associated with Blue List candidate technologies
- Review cybersecurity assessment reports, supporting technical documentation, and assessment evidence to evaluate the completeness, technical sufficiency, and adequacy of assessments in support of Government technical acceptance decisions
- Provide technical recommendations regarding cybersecurity findings, risk mitigation strategies, assessment requirements, technical acceptance, and the applicability of cybersecurity requirements to Blue List candidate technologies
- Verify and validate whether a company's submitted remediation plan would sufficiently mitigate any cyber vulnerabilities identified in provided assessments
- Identify cybersecurity vulnerabilities, threats, attack vectors, and residual risks that may adversely affect DoW missions, warfighter safety, national security, operational resilience, or the confidentiality, integrity, and availability of Government information and systems
- Maintain awareness of applicable Federal statutes, DoW policies, NDAA requirements, cybersecurity frameworks, industry best practices, and Government processes relevant to the Blue List Program
- Provide technical consultation and advisory support to Government personnel and stakeholders regarding cybersecurity matters affecting Blue List technologies, assessments, policy implementation, and program execution
- Monitor emerging cybersecurity threats, vulnerabilities, technologies, and policy developments affecting small unmanned systems and provide recommendations to support the continued evolution of the Blue List Program
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
