Senior Cybersecurity Analyst

ENSCO, Inc.•Colorado Springs, CO

3h•$110,000 - $148,000•Hybrid

About The Position

We are seeking an experienced Senior Cybersecurity Analyst to provide advisory & assistance services (A&AS) to support a major defense program, focusing on the acquisition and execution of Space Force systems. The position is available in Colorado Springs, CO with a hybrid work arrangement. Duties include but are not limited to: • Providing cybersecurity support for satellite communications network systems including Telemetry, Tracking & Control (TT&C), scheduling, communications, and associated systems. • Provide in-depth technical insights on projects through planning, acquisition, and execution as technical support to the Government. • Collaborate with cross-functional teams to ensure feasibility of design. • Review and assess contractor designs and conduct trade studies on alternative system design approaches. • Update and execute Continuous Monitoring Policy and Procedures. • Facilitate meetings with stakeholders necessary to create and obtain MOUs, MOAs, and SLAs required to meet policy. • Working with the team to identify gaps within current architecture and assist with determining personnel, methodologies and tools required to achieve the Continuous Monitoring strategy. • Advise on emerging technologies available to automate cybersecurity goals. • Integrate into the roadmap and drive project execution to assist in closing technical gaps in the baseline, reducing the manpower required to have an effective ConMon program. • Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy. • Assist ISSM in gaining and maintaining RMF accreditation packages for current and future systems. • Passive evaluations such as compliance audits and active evaluations such as vulnerability assessments. • Establishing strict program control processes to ensure mitigation of risks and support obtaining certification and accreditation of systems. • Prepare and review Security test and Evaluation (ST&E) plans and test reports, analytical evaluation of systems' applicable RMF controls and mitigations, system hardening procedures, and development of Cyber requirements.

Requirements

Bachelor's degree and 5 years of specific experience supporting DOD Cyber/ Information Systems Security.
Demonstrated understanding and experience with DoD Cybersecurity policy.
Understanding of the system certification process.
Strong knowledge base of eMASS
Experience with information assurance risk assessments.
8140 cert for 752-Basic (Security +)
Understanding of information security principles, DoD STIGs, and A&A processes for systems.
Strong written and verbal communication skills.
Strong problem-solving skills.
MUST HAVE A CURRENT SECRET SECURITY CLEARANCE, FOR WHICH YOU MUST BE A U.S. CITIZEN. YOU WILL NOT BE CONSIDERED FOR THIS POSITION IF YOU DO NOT MEET THIS REQUIREMENT.

Nice To Haves

BS/MS in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree; or a degree in a Mathematics or Engineering field.
Extensive cyber policy experience within DOD Space or Space Force
Evaluating security vulnerabilities and mitigation strategies for networked and non-networked systems.
OpenRMF experience
DOD 8140 cert for 752-Advanced (CISSP, CASP+, CCSP, CCISO, CISM, or GSLC)
Current TS-SCI security clearance

Responsibilities

Providing cybersecurity support for satellite communications network systems including Telemetry, Tracking & Control (TT&C), scheduling, communications, and associated systems.
Provide in-depth technical insights on projects through planning, acquisition, and execution as technical support to the Government.
Collaborate with cross-functional teams to ensure feasibility of design.
Review and assess contractor designs and conduct trade studies on alternative system design approaches.
Update and execute Continuous Monitoring Policy and Procedures.
Facilitate meetings with stakeholders necessary to create and obtain MOUs, MOAs, and SLAs required to meet policy.
Working with the team to identify gaps within current architecture and assist with determining personnel, methodologies and tools required to achieve the Continuous Monitoring strategy.
Advise on emerging technologies available to automate cybersecurity goals.
Integrate into the roadmap and drive project execution to assist in closing technical gaps in the baseline, reducing the manpower required to have an effective ConMon program.
Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy.
Assist ISSM in gaining and maintaining RMF accreditation packages for current and future systems.
Passive evaluations such as compliance audits and active evaluations such as vulnerability assessments.
Establishing strict program control processes to ensure mitigation of risks and support obtaining certification and accreditation of systems.
Prepare and review Security test and Evaluation (ST&E) plans and test reports, analytical evaluation of systems' applicable RMF controls and mitigations, system hardening procedures, and development of Cyber requirements.