Cybersecurity Systems Analyst (Senior)

Amentum•Tampa, FL

8d•Onsite

About The Position

Amentum is hiring a Senior Cybersecurity Systems Analyst to provide dedicated, on-site support for cybersecurity assessments, compliance, and validation for USSOCOM, its Component Commands, TSOCs, and deployed forces. The role executes a framework for assessing cybersecurity effectiveness and validating compliance with applicable regulations, standards, and guidance from USSOCOM and higher headquarters, including DoD, DIA, DISA, NSA, and USCYBERCOM. Work includes security assistance visits, inspections, vulnerability scanning and remediation, patch validation, security reviews, capability-package validation, and support for emerging technologies such as WLAN, VPN, Mobility Access, Data at Rest, and Enterprise Gray network solutions. The analyst assesses organizational security posture, prepares assessment schedules and reports, tracks mitigation actions and POA&Ms through completion, and identifies systemic risks through analysis of findings, metrics, and trends. The role also supports vulnerability management, IAVM and self-inspection programs, FISMA reviews, security-plan reviews, and required compliance reporting. The analyst develops mitigation processes and strategies, prepares documentation for government approval, responds to cybersecurity requests for information, and implements cybersecurity tasks as directed. This position requires an active TS/SCI clearance and at least eight years of experience, a bachelor's degree, and a current DoD 8570.01-M IAT Level III or IAM Level III certification. Normal hours are Monday through Friday between 6:00 a.m. and 4:00 p.m. Travel of up to 10% may be required. Compensation is listed as $95,000–$105,000.

Requirements

At least 8 years of experience.
Bachelor of Arts or Bachelor of Science degree.
Current DoD 8570.01-M IAT Level III or IAM Level III certification.
Active TS/SCI security clearance; U.S. citizenship is required to obtain a U.S. security clearance.
Excellent written, verbal, and interpersonal communication skills.
Ability to work effectively with coworkers and all levels of management.
Ability to operate a personal computer, printer, copy machine, telephone, fax machine, and other work-related tools.
Ability to lift up to 40 pounds as necessary.
Ability to meet the position's attendance expectations; normal hours are Monday through Friday between 6:00 a.m. and 4:00 p.m.
Independent personal transportation to the office or work site is required.
Wear a seat belt when operating a vehicle for work and do not use cellular devices while the vehicle is in motion.

Nice To Haves

Experience with U.S. Combatant Commands, particularly USCENTCOM or USSOCOM.
Technical background with system administration, architecture, and engineering.
Technical background in networking, identity management, Microsoft and Linux operating systems, databases, and mobility.
Working knowledge of the Risk Management Framework (RMF).
Knowledge of Telos Xacta or Enterprise Mission Assurance Support Services (eMASS).
Knowledge and experience with DoD information-assurance processes and policies, including DoDI 8510.01, NIST, CNSS, CJCSM 65101.01, incident response, and other IA policies.

Responsibilities

Provide dedicated, on-site support for cybersecurity assessments, compliance, and validation.
Perform cybersecurity site visits, inspections, scanning, remediation, patch-compliance checks, and reviews.
Assess the security posture of USSOCOM Component Commands, TSOCs, and deployed forces and verify compliance with applicable DoD, DIA, and USSOCOM guidance.
Assemble and execute an approved assessment schedule and prepare a report of findings and mitigation actions within 60 calendar days after each assessment.
Track actions taken at assessed sites until completion and report their status.
Analyze assessment findings, develop metrics and trend analyses, and identify common security risks.
Validate system patching, conduct validation scanning, develop POA&Ms, and report as required by applicable policies and regulations.
Assist subordinate organizations with required scanning and vulnerability-management programs.
Track and report compliance with cybersecurity regulations and directives to higher headquarters organizations, including USCYBERCOM and DIA.
Maintain records documenting compliance with federal laws, directives, policies, and procedures, and provide authorized organizations access to those records.
When an audit or review identifies a finding or risk, provide a POA&M within three business days, track it, and provide status updates.
Periodically review information security and physical security plans and recommend measures to safeguard classified, sensitive, and unclassified information.
Identify and document whether physical security elements supporting DoD networks, systems, services, and devices comply with applicable security controls for access control.
Execute IAVM programs and track and report IAVA and IAVB compliance status.
Coordinate with subordinate organizations on required reporting and compliance status and track POA&Ms through completion.
Execute cybersecurity self-inspection programs and track and report compliance and completion.
Perform FISMA network and system security reviews in accordance with applicable organizational policies, procedures, and regulations.
Publish trend analyses of cybersecurity assessments, lessons learned, and recommended mitigation approaches within 30 calendar days after an assessment.
Provide subject matter expertise for courses of action and implementation of cybersecurity mitigation strategies.
Develop and implement processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses related to software and hardware deployment.
Develop and submit documentation for government approval identifying weaknesses, recommending manual and automated testing methods, and describing how results will be submitted for evaluation and mitigation.
Respond to cybersecurity requests for information from external organizations and NetOps decision makers.
Implement directed cybersecurity tasks, including insider-threat mitigation, data-transfer authorities, and privileged-user oversight.
Demonstrate professional conduct and communicate clearly and accurately in English with customers, management, and coworkers.
Travel to customer and test locations as required, potentially by airline; use independent personal transportation to the office or work site when needed.