Cybersecurity Systems Analyst (Associate)

Amentum•Tampa, FL

3d•$58,000 - $64,000•Onsite

About The Position

Amentum is seeking a Cybersecurity Systems Analyst (Associate) to provide full-time, onsite support in Tampa, Florida. The role executes cybersecurity assessment, compliance, and validation activities to assess cybersecurity effectiveness and verify compliance with applicable regulations and standards. Work includes security assistance visits and inspections, vulnerability scanning and remediation, patch compliance, security reviews, capability-package validation, and registration supporting emerging technologies such as WLAN, VPN, Mobility Access, Data at Rest, and Enterprise Gray network solutions. The analyst supports USSOCOM, its Component Commands, TSOCs, and deployed forces in accordance with their policies and guidance, as well as requirements from organizations including DoD, DIA, DISA, NSA, and USCYBERCOM. The position includes preparing assessment schedules and reports, tracking findings and mitigation actions, maintaining compliance records, managing POA&Ms and vulnerability programs, and providing cybersecurity expertise and responses to external requests. Work may take place indoors or outdoors, and travel of up to 10% may be required.

Requirements

Bachelor’s degree (BA/BS).
Less than five years of experience required.
Current DoD 8570.01-M IAT Level II certification; examples include CCNA-Security, GICSP, GSEC, Security+ CE, SSCP, CISSP or CISSP Associate, CASP+ CE, CISA, GCED, or GCIH.
Active TS/SCI clearance; U.S. citizenship is required to obtain a security clearance.
Excellent written and oral communication and interpersonal skills.
Knowledge and experience with DoD information-assurance processes and policies, including DoDI 8510.01, NIST, CNSS, CJCSM 65101.01, incident response, and other IA policies.
Ability to work professionally with customers, management, and coworkers and communicate clearly and accurately in English.
Ability to lift up to 40 pounds as necessary.
Independent personal transportation to the office or work site is required.
Ability to travel up to 10% to customer and test locations, potentially by airline.
Must follow vehicle safety requirements when driving for work, including wearing a seat belt and not using cellular devices while the vehicle is moving.
Normal hours are Monday through Friday between 6:00 a.m. and 4:00 p.m.; attendance is essential except for specified leave and approved time off.

Nice To Haves

Experience with US Combatant Commands, particularly USCENTCOM or USSOCOM.
Technical background with system administration, architecture, and engineering.
Technical background in networking, identity management, Microsoft and Linux operating systems, databases, and mobility.
Working knowledge of the Risk Management Framework (RMF).
Knowledge of Telos Xacta or Enterprise Mission Assurance Support Services (eMASS).

Responsibilities

Provide dedicated, onsite support for cybersecurity assessments, compliance, and validation.
Perform cybersecurity site visits, inspections, scanning, remediation, patch-compliance validation, and security reviews.
Assess the SIE organizational security posture of USSOCOM Component Commands, TSOCs, and deployed forces, and verify compliance with applicable guidance.
Assemble and execute approved assessment schedules; prepare reports of findings and mitigation actions within 60 calendar days after each assessment; and track site actions through completion.
Analyze assessment findings to identify common security risks and develop metrics and trend analyses.
Validate system patching, perform validation scanning, develop Plans of Action and Milestones (POA&Ms), and report as required by applicable policies and regulations.
Assist Component Commands, TSOCs, and deployed forces with scanning and vulnerability-management programs.
Track and report compliance with cybersecurity regulations and directives to higher headquarters organizations, including USCYBERCOM and DIA.
Maintain records of compliance with federal laws, directives, policies, and procedures, and provide authorized organizations and delegates open access to those records.
Prepare a POA&M within three business days when audits or reviews identify a finding or risk; track POA&Ms and provide status updates.
Periodically review Information Security Plans and Physical Security Plans and recommend measures to safeguard classified, sensitive, and unclassified information.
Document and verify that physical security elements supporting DoD networks, systems, services, and devices comply with applicable security controls for access control.
Execute Information Assurance Vulnerability Management programs; track and report IAVA and IAVB compliance; coordinate required reporting; and track POA&Ms through completion.
Execute cybersecurity self-inspection programs and track and report compliance and completion.
Perform FISMA network and system security reviews in accordance with applicable policies, procedures, and regulations.
Publish trend analyses of SIE cybersecurity assessments, lessons learned, and recommended mitigation approaches within 30 calendar days after an assessment.
Provide subject matter expertise for courses of action and implementation of cybersecurity mitigation strategies.
Develop and implement processes, procedures, and capabilities to mitigate software and hardware deployment vulnerabilities and weaknesses; submit supporting documentation for government approval.
Respond to cybersecurity Requests for Information from external organizations and NetOps decision makers.
Implement cybersecurity tasks directed by task orders, policies, procedures, regulations, and directives, including insider threat mitigation, data transfer authorities, and privileged-user oversight.
Coordinate required reporting and compliance status with USSOCOM, its Component Commands, TSOCs, and deployed forces; track and report associated POA&Ms.