Cybersecurity Analyst

Intrepid Solutions and Services • Alexandria, VA

20h • Onsite

About The Position

CIS-Intrepid Solutions is seeking a Cybersecurity Analyst – Information Security System Engineer (ISSE) to support its US Army TENCAP client in Alexandria, Virginia. The client enables the Army to rapidly exploit and influence national capabilities and architectures. This position is 100% onsite, anticipates standard Monday–Friday work hours, and involves limited CONUS travel.

The ISSE analyzes existing and emerging TENCAP information systems and IT infrastructure for compliance with Army, DoD, and federal information-assurance policies and requirements. The role develops and documents cybersecurity standards and guidance, performs risk assessments, and provides technical cybersecurity recommendations throughout the system development life cycle. It also supports system security planning, security-control reviews, assessment and authorization, acquisition services, architecture changes, and program change control. The position requires an active TS/SCI clearance and extensive cybersecurity experience supporting DoD or IC intelligence systems and acquisition programs.

Requirements

• Active TS/SCI clearance; candidates without a currently active TS/SCI clearance are ineligible. The employer does not provide initial clearance sponsorship or upgrade sponsorship.
• Bachelor’s degree in computer science, computer engineering, or a related field plus 10 years of work experience, or 15 years of work experience.
• IAM Level III or IAT Level III baseline certification in accordance with DoD 8570.01, and compliance with applicable DoD and Army training and certification requirements, including DoD 8140.01, DFARS 252.239.7001, and AR 25-2.
• 20+ years of progressively complex cybersecurity experience designing, developing, integrating, testing, certifying, and accrediting security solutions for DoD or IC intelligence systems.
• 15+ years of experience applying the Risk Management Framework (ICD 503) to accreditation of DoD or IC information technology systems.
• 10+ years of cybersecurity experience supporting DoD acquisition programs or projects, including system security requirements, post-Milestone B and C cyber documentation, and prototype testing support.
• Proficiency with Linux, including command-line use, file systems, networking, scripting and automation, and system administration.
• Knowledge of configuring network components and secure network transport components; experience supporting development, configuration, and deployment (connection approvals) of Cross Domain Solutions (CDS).
• Experience with encryption, Public Key Infrastructure (PKI), Data at Rest (DAR), Data in Transit (DIT), and FIPS 140-2/3.
• Experience reviewing firewall rules, including ports, protocols, services, and source and destination network traffic.
• Experience providing cybersecurity support for Preliminary Design Reviews (PDRs), Critical Design Reviews (CDRs), and Final Design Reviews (FDRs).
• Experience with vulnerability assessment, vulnerability management, and compliance tools, including Nessus, ACAS, and SCAP.
• Experience with configuration management and system hardening using DISA STIGs or another Department or Agency hardening process.
• Experience supporting DevSecOps implementation.
• Experience with NIST SP 800-53 and the RMF defined by NIST 800-37.
• Experience with the Assessment and Authorization (A&A) process, including steps leading to authorization and post-authorization activities.
• Experience translating policies and guidance into technical solutions and conveying highly technical topics in clear briefs or presentations to leadership.
• Subject to investigative and assignment requirements under AR 25-2, AR 380-67, the Personnel Security Program, and related regulations.

Nice To Haves

• Experience with the Cybersecurity Risk Management Construct (CSRMC).

Responsibilities

• Analyze existing and emerging TENCAP information systems and IT infrastructure for compliance with Army, DoD, and federal information-assurance policies, orders, tasks, and regulations.
• Develop and document standards and guides for information-assurance and cybersecurity solutions, including compliance, system security design, and assessments.
• Conduct and document risk assessments for unclassified and classified systems, identifying risks, likelihood, impact, and mitigating safeguards.
• Provide technical cybersecurity-ISSE recommendations and documentation throughout the system development life cycle.
• Present cybersecurity-ISSE recommendations in meetings, briefings, and design reviews.
• Provide Assessment and Authorization expertise, develop and review System Security Plans (SSPs), and review and update security controls.
• Review and technically validate findings in Security Assessment Reports (SARs) and evaluate POA&Ms.
• Assess hardware and software cybersecurity effectiveness in support of system architecture design or changes and program change control management.
• Help ensure systems remain compliant with cybersecurity policies.
• Provide cybersecurity-ISSE guidance in support of acquisition services.

Benefits

• 401(k) with company matching
• Dental insurance
• Medical insurance
• Health Savings Account option
• Flexible Spending Account
• Vision insurance
• Life and disability insurance
• Ancillary offerings, including hospital indemnity, accident, critical illness, and pet insurance
• Paid time off
• Holiday pay

What This Job Offers

• Job Type: Full-time
• Career Level: Senior