About this opportunity
Cybersecurity Jobs lists this Intermediate Cybersecurity Analyst opportunity in quantico, Virginia. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Support AFOSI cybersecurity operations with intermediate-level information assurance, RMF deliverables, vulnerability management, and security monitoring.
Responsibilities
Provide technical engineering and implementation of security solutions, including:Designing and managing a vulnerability scanning architecture
Engineering and implementing a SIEM solution
Integrating security testing into the development pipeline
Defining secure configuration baselines
Developing technical documentation for security architecture
Build, coordinate, maintain, and update RMF Assessment and Authorization packages and support security documentation for AFOSI systems and enclaves
Implement and monitor security controls, document findings, and track remediation activities through the POA&M process
Support vulnerability scanning and reporting, including:Reviewing scan results
Maintaining asset lists
Scheduling scans
Identifying configuration issues and missing patches using ACAS or comparable tools
Correlate vulnerability findings with IAVM alerts and bulletins, including CVE mapping to support compliance tracking
Review system and application configurations against applicable DISA STIGs and Security Requirements Guidance
Maintain GRC records and eMASS artifacts, including policies, plans, procedures, reports, and authorization documentation
Support security-log review and reporting using SIEM tools such as Splunk or ArcSight ; use basic PowerShell scripts to collect and organize security data
Collaborate with cybersecurity, infrastructure, operations, and development teams; communicate findings clearly; support readiness assessments and incident-response activities as assigned
Requirements
Active Top Secret clearance and SCI eligible
Approved DoD 8570/8140 IAT Level II certification, or ability to obtain required certification within the timeframe permitted by the contract
Foundational knowledge of:RMF
STIGs
Security controls
Vulnerability management
POA&M tracking
Event-log review
Firewalls
Security risk assessments
Familiarity with tools is preferred rather than required, including:eMASS and other GRC applications
ACAS/Tenable and HBSS
Splunk and ArcSight
Active Directory , PowerShell , and asset-management tools
U.S. citizenship
5 years of cybersecurity and information assurance experience, including at least 3 years of systems administration experience supporting servers and infrastructure
Associate’s or bachelor’s degree in cybersecurity, information technology, computer science, or related field preferred; equivalent technical training and relevant experience considered
Demonstrate attention to detail, analytical problem-solving, effective oral and written communication, and ability to learn DoD cybersecurity processes and tools
Technologies
Risk Management Framework (RMF)
Security Information and Event Management (SIEM)
Splunk
ArcSight
PowerShell
ACAS
Tenable
eMASS
HBSS
Active Directory
IAVM
Common Vulnerabilities and Exposures (CVE)
DISA Security Technical Implementation Guides (STIGs)
Security Requirements Guidance
Plan of Action and Milestones (POA&M)
GRC applications
Asset-management tools
Benefits
Medical
Dental
Vision
Life and disability coverage
Retirement savings with company match
Paid time off
Voluntary supplemental benefits
Access to an employee assistance program
Educational assistance with tuition reimbursement
Location: Quantico, VA (onsite)
Salary: USD 100,000 - 145,000 per yearly
#J-18808-Ljbffr
Worksite address
quantico, VA, 22134, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.