Cybersecurity Systems Analyst (Senior)

Amentum•Tampa, FL

9d•$95,000 - $105,000•Onsite

About The Position

The Cybersecurity Systems Analyst executes a comprehensive assessment, compliance, and validation framework to assess cybersecurity effectiveness and verify compliance with applicable regulations and standards. The role supports USSOCOM, its Component Commands, TSOCs, and deployed forces, following applicable policies, procedures, regulations, directives, and software development guidelines from those organizations and higher headquarters, including DoD, DIA, DISA, NSA, and USCYBERCOM. Work includes cybersecurity assessments and site visits, inspections, scanning, remediation, patch compliance, security reviews, and validation of capability packages and registration supporting emerging technologies such as WLAN, VPN, Mobility Access, Data at Rest, and Enterprise Gray network solutions. The analyst provides on-site assessment and compliance support; evaluates organizational security posture; identifies risks and trends; manages vulnerability and self-inspection programs; validates patching and scans; develops and tracks POA&Ms; and reports compliance to higher headquarters. The position also reviews information and physical security plans, performs FISMA network and system security reviews, analyzes assessment trends, advises on mitigation strategies and courses of action, develops processes and documentation for mitigating software and hardware weaknesses, and responds to cybersecurity RFIs. The role requires an active TS/SCI clearance, a bachelor's degree, at least eight years of experience, and a current DoD 8570.01-M IAT Level III or IAM Level III certification. Normal hours are Monday through Friday between 6:00 a.m. and 4:00 p.m. The work may be indoors or outdoors depending on the task, and travel of up to 10% may be required.

Requirements

At least 8 years of experience.
Bachelor's degree (BA/BS).
Current DoD 8570.01-M IAT Level III or IAM Level III certification.
Active TS/SCI clearance; U.S. citizenship is required to obtain a U.S. security clearance.
Working knowledge of the Risk Management Framework (RMF).
Knowledge and experience with DoD information assurance processes and policies, including DoDI 8510.01, NIST, CNSS, CJCSM 65101.01, incident response, and other IA policies.
Technical background in networking, identity management, Microsoft and Linux operating systems, databases, and mobility.
Excellent written and oral communication and interpersonal skills.
Ability to work well with coworkers and all levels of management.
Ability to lift up to 40 pounds as necessary.
Ability to operate office equipment including a personal computer, printer, copy machine, telephone, and fax machine.
Independent personal transportation to the office or work site is required.
Attendance is essential during normal hours, Monday through Friday between 6:00 a.m. and 4:00 p.m.

Nice To Haves

Experience with U.S. Combatant Commands, especially USCENTCOM or USSOCOM.
Technical background in system administration, architecture, and engineering.
Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system.
Examples of qualifying certifications include CISSP or Associate, CASP+ CE, CISA, CISM, CCISO, GCED, GCIH, CCSP, or GSLC.

Responsibilities

Provide dedicated, on-site support for cybersecurity assessments, compliance, and validation.
Perform cybersecurity site visits, inspections, scanning, remediation, patch compliance, and reviews.
Assess the SIE organizational security posture of USSOCOM Component Commands, TSOCs, and deployed forces, and verify compliance with DoD, DIA, and USSOCOM guidance.
Assemble and execute an approved assessment schedule; issue a findings and mitigation report within 60 calendar days after each assessment; and track actions through completion.
Analyze findings to identify common security risks and develop metrics and trend analyses.
Validate system patching, perform validation scanning, develop Plans of Action and Milestones (POA&Ms), and report as required by applicable policies and regulations.
Assist Component Commands, TSOCs, and deployed forces with scanning and vulnerability management programs.
Track and report compliance with cybersecurity regulations and directives to higher headquarters organizations such as USCYBERCOM and DIA.
Maintain records documenting compliance with federal laws, directives, policies, and procedures, and provide authorized organizations and delegates access to those records.
Provide a POA&M within three business days when audits or reviews identify a finding or risk; track POA&Ms and provide status updates.
Periodically review Information Security Plans and Physical Security Plans and recommend safeguards for classified, sensitive, and unclassified information.
Document and verify physical security controls supporting DoD networks, systems, services, and devices, including access-control compliance.
Execute Information Assurance Vulnerability Management programs; track and report IAVA and IAVB compliance, coordinate reporting with subordinate organizations, and track POA&Ms through completion.
Execute cybersecurity self-inspection programs and track and report compliance and completion.
Perform FISMA network and system security reviews in accordance with applicable organizational policies, procedures, and regulations.
Publish trend analyses, lessons learned, and recommended mitigation approaches within 30 calendar days after an assessment.
Provide subject matter expertise for course-of-action development and implementation of cybersecurity mitigation strategies.
Develop processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses in software and hardware deployments; submit supporting documentation for government approval.
Respond to cybersecurity Requests for Information from external organizations and NetOps decision makers.
Implement directed cybersecurity tasks, coordinate required reporting and compliance status, and track associated POA&Ms.
Maintain professional conduct and clear, concise, accurate English communications with customers, management, and coworkers.
Use independent transportation to the office or work site and travel, potentially by air, to customer and test locations as required.
Wear a seat belt when operating a vehicle for work and do not use cellular devices while the vehicle is moving.