Cybersecurity Analyst

M9 Solutions•Washington, DC

21h•$60,000 - $180,000•Onsite

About The Position

M9 Solutions is seeking a Cybersecurity Analyst to work on-site in Washington, DC, supporting a government contract. The role researches and enforces technical cybersecurity compliance for government systems, analyzes security controls and data, and works with government security assessment teams to identify noncompliance and potential vulnerabilities. The analyst also supports remediation, audits, incident response, threat analysis, and vulnerability management, and maintains detailed records of evidence and actions. An active Top Secret clearance is required.

Requirements

Active Top Secret security clearance.
8 or more years of relevant experience.
Detailed knowledge of federal standards and technologies used in cybersecurity compliance disciplines.

Nice To Haves

Industry-recognized certification such as CompTIA CySA+, CompTIA CASP+, CompTIA PenTest+, CompTIA SecurityX, EC-Council Certified Ethical Hacker (C|EH), EC-Council Certified Incident Handler (C|IH), GIAC GPEN, or GIAC GCIH.

Responsibilities

Research and enforce technical cybersecurity compliance of government systems.
Investigate system attributes related to encryption, vulnerability management, multi-factor authentication, centralized logging and auditing, and other cybersecurity disciplines.
Provide technical summaries and input on data.
Work with Security Assessment Teams (Red, Blue, and Purple) and the DCISO/CISO to analyze systems and identify noncompliance and potential vulnerabilities.
Assist client personnel and other stakeholders with methods to remediate system shortcomings.
Conduct in-depth technical analysis, confirm compliance information, and maintain detailed records of actions, evidence, and communications.
Assist with interpreting and implementing Federal Government requirements for government systems and coordinate audits and data calls.
Analyze logs to identify anomalous traffic and potential data exfiltration.
Maintain working knowledge of current system vulnerabilities and their potential exploitation.
Interpret security guidance and technical requirements, and disseminate them in a more readable format.
Ensure Federal Government security policies are followed and required documentation is provided.
Assist with incident detection, isolation, remediation, and investigation when required.
Participate in After Action Reviews of incident responses.
Analyze threat intelligence to identify emerging threats and support proactive defense.
Assist with vulnerability management notifications from government agencies and vendors, ensuring required remediation timelines and accurate reporting.
Produce, analyze, and interpret forensically sound images of data and electronic storage media when required or requested.