Cybersecurity Systems Analyst (Associate)

Amentum•US-FL-MacDill AFB-7701 Tampa Pointe Blvd (FL050), FL

2d•Onsite

About The Position

The Cybersecurity Systems Analyst executes assessments, compliance activities, and validation to evaluate cybersecurity effectiveness and verify regulatory and standards compliance. Work includes applying software maintenance patches; conducting security assistance visits, inspections, validation scans, remediation, and security reviews; and validating capability packages and registration for emerging technologies such as WLAN, VPN, Mobility Access, Data at Rest, and Enterprise Gray network solutions. The work follows applicable USSOCOM, Component Command, TSOC, deployed-force, and higher-headquarters policies, procedures, regulations, directives, and software development guidelines. The position provides dedicated on-site cybersecurity support to USSOCOM’s Component Commands, TSOCs, and deployed forces. It assesses organizational security posture, coordinates assessment schedules, documents findings and mitigation actions, tracks remediation through completion, analyzes security risks and trends, supports vulnerability management and IAVM programs, and reports compliance to higher headquarters. The role also performs FISMA security reviews, reviews information and physical security plans, develops POA&Ms and mitigation recommendations, supports cybersecurity strategy and COA development, and responds to cybersecurity requests for information. Travel to customer and test locations may be required, up to 10%.

Requirements

Less than 5 years of experience required.
Bachelor’s degree (BA/BS) required.
Current DoD 8570.01-M IAT Level II certification required; examples include CCNA-Security, GICSP, GSEC, Security+ CE, SSCP, CISSP or Associate, CASP+ CE, CISA, GCED, or GCIH.
Active TS/SCI clearance required.
Knowledge and experience with DoD information assurance processes and policies, including DoDI 8510.01, NIST, CNSS, CJCSM 65101.01, incident response, and other IA policies.
Excellent written and oral communication and interpersonal skills.
Ability to work well with coworkers and all levels of management.
Ability to lift up to 40 pounds as necessary.
Ability to operate office equipment and work-related tools, including a personal computer, printer, copier, telephone, and fax machine.
Independent personal transportation to the office or work site is required.
Must maintain professional conduct and clear, concise, accurate English communications.
Must comply with work-vehicle safety requirements, including wearing a seat belt and not using cellular devices while the vehicle is in motion.

Nice To Haves

Experience with US Combatant Commands, particularly USCENTCOM or USSOCOM.
Technical background in system administration, architecture, and engineering.
Technical background in networking, identity management, Microsoft and Linux operating systems, databases, and mobility.
Working knowledge of the Risk Management Framework (RMF).
Knowledge of Telos Xacta or Enterprise Mission Assurance Support Services (eMASS).

Responsibilities

Provide dedicated, on-site support for cybersecurity assessments, compliance, and validation.
Conduct cybersecurity site visits, inspections, scanning, remediation, patch compliance activities, and reviews.
Assess the SIE organizational security posture of USSOCOM Component Commands, TSOCs, and deployed forces; verify compliance with applicable DoD, DIA, and USSOCOM guidance.
Assemble and execute approved assessment schedules; prepare reports summarizing findings and mitigation actions within 60 calendar days after each assessment; track site actions through completion.
Analyze assessment findings to identify common security risks and develop metrics and trends.
Validate system patching, conduct validation scanning, develop Plans of Action & Milestones (POA&Ms), and report as directed by applicable policies and regulations.
Assist Component Commands, TSOCs, and deployed forces with scanning and vulnerability management programs.
Track and report compliance with applicable cybersecurity regulations and directives to higher headquarters organizations such as USCYBERCOM and DIA.
Maintain records documenting compliance with federal laws, directives, policies, and procedures, and provide authorized organizations and delegates access to those records.
When audits or reviews identify findings or risks, provide a POA&M to correct or mitigate the weakness within three business days; track POA&Ms and provide status updates.
Periodically review information security and physical security plans and recommend measures to safeguard classified, sensitive, and unclassified information.
Identify and document compliance of physical security elements supporting DoD networks, systems, services, and devices with applicable access-control security controls.
Execute IAVM programs; track and report IAVA and IAVB compliance, coordinate required reporting with subordinate organizations, and track POA&Ms through completion.
Execute cybersecurity self-inspection programs and track and report compliance and completion.
Perform FISMA network and system security reviews in accordance with applicable organizational policies, procedures, and regulations.
Publish trend analyses, lessons learned, and recommended mitigation approaches within 30 calendar days after an assessment.
Provide subject matter expertise for COA development and implementation of cybersecurity mitigation strategies.
Develop and implement processes, procedures, and capabilities to mitigate software and hardware deployment vulnerabilities and weaknesses; submit supporting documentation for government approval.
Respond to cybersecurity RFIs from external organizations and NetOps decision makers; implement directed cybersecurity tasks, coordinate reporting and compliance status, and track associated POA&Ms.
Travel to customer and test locations as required, potentially involving airline travel.