Cyber Security Analyst

Job Description

ASRC Federal Broadleaf, Inc. is currently seeking a Cyber Security Analyst in Quantico, VA.

JOB DESCRIPTION:

• Cyber Assurance (CA) team which conducts Risk Management Framework efforts supporting Enterprise level tasks (Tier II) in the roles of Cyber Analyst and Cyber Validators. In addition, the CA team conducts A A validation and security testing devices before allowing the hardware to be added to the network. The CA team may be required to travel at least 10 times a year for annual security assessments and continuous monitoring efforts. Cybersecurity support includes systems which comprise the ESS, the Agency's administrative networks- (Unclassified but sensitive Data Network (UDN), Classified Data Network (CDN), and JWICS enclaves), GIG waivered networks and all standalone systems (non-networked computers).

BASIC QUALIFICATIONS:

• At least three (3) Years System Level Cybersecurity Experience in the following areas:
• Knowledge of Risk Management Framework (RMF), STIGs and eMASS or similar e.g., Xacta or CSAM
• Develop, update, and provide for Government review, all DoD and other federal agency-specific documentation specified in Government A A Framework and DoDI 8510.01, as applicable.
• Conduct A A related security test and evaluations using government mandated tools and test procedures.
• Analyze IT products against foreign ownership, known vulnerability databases, and government approved products list(s).

• Scan IT products using Government approved scanning tools to identify potential risk to the Government production network.
• Develop and maintain standard operating procedures for IT product analysis.
• Provide Cyber IT analysis results and test reports for government approval.
• Generate reports identifying noncompliant systems.
• Knowledge of DISA Security Technical Information Guides, RMF, NIST SP 800-53, Vulnerability Tools, and other applicable DoD Cybersecurity policies

• Possess strong writing skills; experience preparing enterprise-wide SOPs, reports for high level officials.
• Experience developing cybersecurity documentation, Plan of Actions Milestones (POAM), enterprise mission assurance support service (eMASS) submissions, and system security engineering efforts.
• Work experience with Cloud Based Internet Isolation (CBII), SPLUNK (Lvl 2), ForeScout and EnCase software

Requirements

EDUCATION REQUIREMENTS:

• Associates or Bachelor's Degree, or equivalent experience in Cybersecurity, and/or Information Systems Management, Information Technology

CERTIFICAITON(S):

• 8570 IAM Level II required (e.g., CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, HCISPP)

CLEARANCE LEVEL:

• Active Secret Security Clearance

WORK ENVIRONMENT AND PHYSICAL DEMANDS:

• This is a partial Telework position.
• If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection.

**COVID-19 Vaccination Requirement Statement

The COVID-19 vaccination requirement in Executive Order 14042 and FAR 52.223-99 is currently not effective. But please note that if those or other related requirements become effective, positions will require successful candidates to obtain and show proof of COVID-19 vaccination(s). ASRC Federal is an equal opportunity employer and will provide reasonable accommodation to those individuals who are unable to be vaccinated consistent with federal, state, and local law.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity / Affirmative Action employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.