Job Description

Summary:

As a Cybersecurity Analyst, you will serve as the Assured Compliance Assessment Solution (ACAS) Subject Matter Expert (SME) for all network security architectures, designs, implementations, and operations within the NITE network. Additionally, you will provide technical support for the testing of systems, software, tools and products while identifying operational and functional requirements of new, developing and existing systems from a system security approach, which includes but not limited to defining potential threats, vulnerabilities, safeguards, and risk factors.

• Perform security testing and evaluation of servers, workstations, databases, and network fabric devices (i.e. firewalls, switches, routers, load balancers) in order to determine security vulnerabilities and weaknesses, and to create reports of security findings in support of security authorization process.
• Must possess the ability to work independently or work well with a team
• Create customized scanning/testing configurations within testing tools to suit security configuration requirements.
• Identify the applicable NIST 800-53 security controls or policies that correspond to any finding identified via manual or automated testing, to a specific CVE, IT technologies, or any other physical or logical subject.
• Perform analysis of cybersecurity directives, policies and instructions to include, but not limited to: Communications Task Orders (CTOs), Fragmentary/Task/Operation Orders (FRAG/TASK/OPORDs), IA Vulnerability Management (IAVM), Public Key Infrastructure (PKI) guidance, and STIG requirements.
• Track and report compliance status in the Vulnerability Remediation Asset Manager (VRAM) and similar reporting tools as applicable
• Ensure current security testing and evaluation software is sufficient to the task of conducting infrastructure security testing and regularly look for and recommend additional software that may fill gaps in current security testing toolset.
• Provide subject matter expertise concerning known vulnerabilities, and become knowledgeable of newly released vulnerabilities, and discuss methods of exploitation, methods of mitigation or remediation, severity of impact and other pertinent considerations of vulnerabilities.
• Perform risk analysis/independent verification on security configuration and STIG finding risk reports / POA&Ms for devices on the network.

Qualifications:

Comply with the DoD Cyber IT/CSWF Program requirements of DoD 8570.1-M and SECNAV M-5239.2 at the Journeyman level. Preferred COMPTIA Security+ certification.

Subject matter expert with at least  7 + years of related experience, and Bachelor of Science in Telecommunications Engineering or equivalent degree.

Must be able to obtain and maintain an active Department of Defense (DoD) SECRET security

Proficient in Microsoft Office products.