Cybersecurity Analyst

Metron • Laurel, MD

2d • $100,000 - $180,000 • Onsite

About The Position

Metron is an employee-owned company dedicated to delivering innovative solutions for the most challenging national security problems. For over 40 years, our principled approach to problem-solving has yielded creative solutions at the intersection of advanced mathematics, computer science, physics, and engineering. This position will provide operational and technical support to National & Navy missions in a dynamic, fast-paced environment. Successful candidates will have detailed knowledge of National SIGINT systems and their application to support Navy missions, the ability to work across intelligence disciplines to provide real-time support to operations and experimentation, apply technical expertise to complex analytical problems, and work as part of a team or independently. Candidates must also possess a demonstrated ability to operate shifting priorities, adapt to a fast-paced environment, and deliver under pressure. This position is located on a client site and may require on-call support to a 24x7 military operations team.

Requirements

• High School Diploma or equivalent
• Active TS/SCI Clearance with Full-Scope Poly (or agreement to take poly when requested)
• At least 3 years of experience as a Software Engineer or DevSecOps, system engineering or closely related technical role
• Knowledge of: Container (Docker) Build and Infrastructures, Kubernetes, Software Configuration Management tools such as GitLab, CI/CD processes, GitLab procedures/documentation
• Experience with SBOM generation, SCA, container scanning, artifact signing, provenance, or software supply-chain security
• Experience with policy-as-code, OPA/Gatekeeper, Kubernetes admission controls, or secure workload policies
• Experience with Infrastructure-as-Code or Configuration-as-Code practices using Terraform, Ansible, Bicep, CloudFormation, or similar tools
• Experience with Prometheus, Grafana, Loki, or similar observability platforms
• Experience in defense contracting, government programs, CMMC, NIST 800-171, RMF, STIGs, or other compliance-driven environments

Nice To Haves

• Experience programming in Java, JavaScript, TypeScript, Python or C++
• Familiarity with full-stack web application development in any frameworks/languages

Responsibilities

• Ensure the confidentiality, integrity and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security program, policies, procedures, and tools.
• Support cybersecurity operations for IT networks, systems, and cloud platforms by applying cybersecurity policies and security engineering principles, including identity and access management, encryption, continuous monitoring, secure configuration, and automation.
• Administer enterprise security tools, to include but not limited to firewalls, zero-trust technologies, logging and metrics systems.
• Ensure necessary security controls are in place and operate as intended; advising users of risks to systems and assessing risk; completes and maintains appropriate security documentation including systems security plans.
• Prepare and update documentation IA and ATO documentation, working with the US Government to ensure continuous accreditation.
• Conduct cybersecurity risk assessments, evaluating security control implementations, analyzing residual risk, and supporting Risk Management Framework (RMF) activities and documentation.

What This Job Offers

• Job Type: Full-time
• Education Level: High school or GED