Cybersecurity Analyst

CIS-Intrepid Solutions has a need for a Cybersecurity Analyst – Information Security System Engineer (ISSE) to support our US Army TENCAP client as they enable the Army to rapidly exploit and influence national capabilities and architectures in Alexandria, VA.

The Cybersecurity Analyst - ISSE shall:

• Provide analysis of existing and emerging TENCAP Information Systems, and IT Infrastructure to assess compliance with Army, DoD, and Federal IA policies, orders, tasks, or regulations
• Develop and document standards and guides for IA/cybersecurity solutions, including compliance, system security design, and assessments
• Conduct and document Risk Assessments identifying risks, probability of occurrence, resulting impact, and mitigating safeguards for unclassified and classified systems
• Provide Cybersecurity-ISSE recommendations and documentation throughout the system development life cycle, with emphasis on technical aspects.
• Provide Cybersecurity-ISSE recommendations at meetings, briefings, and design reviews.
• Provide Assessment & Authorization expertise.
  • Development and review of System Security Plan (SSP).
  • Review Security Controls, providing updates.
  • Provide review and technical validation of findings in Security Assessment Reports (SAR).
  • POA&M technical evaluation.
• Provide hardware and software assessment regarding Cybersecurity effectiveness in support of:
  • System architecture design or change.
  • Program Change Control Management process.
• Ensure systems remain compliant with Cybersecurity policies.
• Provide Cybersecurity-ISSE guidance supporting acquisition services.

OPERATING HOURS AND EXPECTATIONS:

• This position anticipates standard work hours, Monday-Friday and will operate 100% onsite.

TRAVEL:

• Limited CONUS travel expected.

 CLEARANCE:

• Active TS/SCI clearance required. We are unable to provide sponsorship of initial clearance or upgrade of existing clearance. Candidates without currently active TS/SCI clearances are ineligible for this role. 

EDUCATION:

• Bachelor's degree in computer science, computer engineering, or related field +10 years of work experience OR 15 years of work experience

CERTIFICATION(S):

• DOD and Army training requirements - DOD 8140.01, Cyberspace Workforce Management; DFARS 252.239.7001, Information Assurance Contractor Training and Certification; AR 25-2, Information Assurance
• Baseline certification as stipulated in DODD 8140.01
• IAM Level III or IAT Level III baseline certification
• IAW DOD 8570.01 certification

SKILLS AND EXPERIENCE:

• 20+ years of progressively complex cybersecurity experience in the design, development, integration, test, certification, and accreditation of security solutions for DOD or IC intelligence systems.
• 15+ years of experience in applying Risk Management Framework (ICD 503) for the accreditation of DOD or IC Information Technology Systems.
• 10+ years of cybersecurity experience supporting DOD acquisition programs / projects, to include:
  • Development of system security requirements
  • Post Milestone "B" and "C" cyber documentation
  • Cybersecurity support for prototype testing.
• Proficiency in LINUX, to include: command-line proficiency; understanding LINUX file systems and networking concepts; scripting & automation; system administration.
• Hardware experience:
  • Knowledge of and experience with configuring network components
  • Knowledge of secure network transport components and configuration
  • Experience in supporting the development, configuration, and deployment (connection approvals) of Cross Domain Solutions (CDS).
• Technology experience:
  • Encryption
    • Public Key Infrastructure (PKI)
    • Data at Rest (DAR)
    • Data in Transit (DIT)
    • FIPS 140-2/3
  • Experience reviewing firewall rules with attention to:
    • Ports, Protocols, and Services
    • Source and destination of network traffic.
• Experience in cybersecurity support for Preliminary Design Review (PDR), Critical Design Review (CDR), and Final Design Review (FDR) as part of a design review process.
• Experience with vulnerability assessment, vulnerability management, and compliance tools.
  • Nessus
  • ACAS
  • SCAP
• Experience in Configuration Management process.
• Experience with system hardening with DISA STIGs or other Department/Agencies hardening process.
• Experience in supporting DevSecOps implementation.
• Experience with NIST SP800-53, RMF as defined by NIST 800-37.
• Experience with Cybersecurity Risk Management Construct (CSRMC) is desirable.
• Experience with the Assessment and Authorization (A&A) process to include the steps leading up to authorization and activities post authorization.
• Experience with translating policies and guidance into technical solutions.
• Experience with translating and effectively conveying highly technical topics in a consumable brief or presentation to Leadership.
• Compliance with DOD and Army training requirements in DOD 8140.01, Cyberspace Workforce Management; DFARS 252.239.7001, Information Assurance Contractor Training and Certification; AR 25-2, Information Assurance.
• Subject to investigative and assignment requirements IAW AR 25-2, AR 380-67, Personnel Security Program, and related regulations.

WHAT WE OFFER:

At CIS Secure and its associated companies, Intrepid Solutions and Services and Darkblade Systems, we believe in promoting fair and transparent pay practices. We are committed to disclosing the compensation range for transparency and to set clear expectations for all applicants for this posting. This range represents the anticipated low and high end of the base salary for the advertised job, promotion, or transfer opportunity. Please note that the pay range provided is a good faith estimate for the position at the time of posting. The actual salary offered may vary based on various factors including but not limited to relevant experience, knowledge, skills and abilities, education, geographic location, as well as internal equity, and alignment to market data.

Job Type: Full-time (onsite)

Pay Range: $185,000.00 - $225,000.00 per year

Benefits:

• 401(k) with company matching
• Dental insurance
• Medical insurance
• Health Savings Account option
• Flexible Spending
• Vision insurance
• Life and Disability Insurance
• Ancillary offerings (Hospital Indemnity, Accident, Critical Illness, Pet Insurance)
• Paid Time Off
• Holiday pay

Intrepid Solutions, a CIS Secure company, is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.