QA Reviewer, Cyber Security Analyst III

Akima, LLC•Rockville, MD

3d•Onsite

About The Position

The Office of the Chief Information Officer (OCIO) advances the Department of Energy’s (DOE) mission by establishing enterprise-wide policy, standards, and services that ensure secure, reliable, and innovative information technology (IT) delivery across the Department. The OCIO is committed to strengthening DOE’s cybersecurity posture, improving IT service performance, and ensuring the protection of the Department’s systems, networks, and data while maintaining responsible stewardship of taxpayer resources. The Cyber Security Analyst III supports this mission by implementing cybersecurity measures, assessing security controls, evaluating system risks, and responding to cybersecurity threats and incidents. This role combines hands‑on operational cybersecurity functions with mid‑level Assessment & Authorization (A&A) responsibilities to ensure DOE systems remain compliant, secure, and resilient.

Requirements

Bachelor’s Degree or four (4) years of equivalent work experience.
5–7 years of experience in cybersecurity operations, security control assessments, or related technical security functions.
Comprehensive knowledge of cybersecurity tools, incident response processes, and security architecture principles.
Demonstrated experience evaluating logs, detection data, and firewall information to identify risks or suspicious activity.
Experience conducting security assessments within federal cybersecurity frameworks (such as NIST RMF, NIST SP 800‑53).
Ability to analyze and document risks, incidents, and vulnerabilities clearly and accurately.
Ability to work independently and manage complex issues with minimal supervision.
Strong written communication skills, including preparation of security documentation and assessment reports.
Ability to obtain Top Secret Clearance.

Nice To Haves

Experience leading small teams or acting as a lead analyst is preferred.

Responsibilities

Conduct assessments of implemented security and privacy controls to determine effectiveness and alignment with DOE requirements.
Review control implementations for accuracy, operating effectiveness, and alignment with security and privacy outcomes.
Document findings, deficiencies, and recommended corrective actions in formal assessment reports and deliver results to Team Leaders.
Conduct initial remediation actions and reassess remediated controls to verify successful implementation.
Assess system-specific and inherited controls in accordance with DOE’s continuous monitoring strategy.
Contribute to cybersecurity performance metrics, deliverables, and reporting requirements.
Implement cybersecurity measures to protect DOE computer systems, networks, and data from intrusion, loss, and service disruptions.
Develop and apply technical methodologies that support operational and functional cybersecurity procedures.
Perform security measures designed to prevent vulnerabilities, threats, and unauthorized access.
Review detection system logs, firewall events, and network traffic data to identify trends, anomalies, and emerging risks.
Design, configure, and utilize cybersecurity tools and applications to evaluate, mitigate, and reduce risk.
Analyze, document, and report cybersecurity incidents, system breaches, and potential impacts to mission operations.
Respond to incident tickets and support incident response activities as required.
Train staff on network security processes, IT security procedures, and best practices when requested.
Handle complex security issues with minimal supervision, escalating only highly complex matters to senior personnel.
Serve as a lead analyst when designated and provide subject matter expertise for broader cybersecurity initiatives.