> Markdown version of [/jobs/ext/2923899-comptia-cybersecurity-analyst-cysa-systems-security-certified-practitioner](https://www.wearedevelopers.com/jobs/ext/2923899-comptia-cybersecurity-analyst-cysa-systems-security-certified-practitioner). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# CompTIA Cybersecurity Analyst (CySA+) Systems Security Certified Practitioner

- **Company:** CareerCircle
- **Location:** Pittsburgh, PA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $107,900.0 - $195,050.0
- **Contract:** Contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Data Analysis, Antivirus Softwares, Software System Penetration Testing, Border Gateway Protocol, Cloud Computing, Cyber Security, Information Systems, Data Centers, Data Transport Utility, Digital Forensics, Federal Information Processing Standards (FIPS), Information Security Management, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Key Management, Network Security, Network Troubleshooting, Microsoft Security Essentials, Routing, Packet Analyzer, Public Key Infrastructure, Red Hat Enterprise Linux, Cloud Services, Phishing, Security Software, Systems Architecture, TCP/IP, Software Vulnerability Management, Network Routing, Computer Networking Systems, Transport Layer Security, Computer Network Operations, Mitre Att&ck, Cyber Threat Analysis, Firewalls (Computer Science), SC Clearance, Information Technology, Data Analytics, Data Management, Cloud Migration, Cisco, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** September 15, 2026
- **Apply:** https://www.careercircle.com/jobs/all/all/usa/all/all/30ffa88a-0245-4d66-918c-61f274dc409a

## About the Role

Dashboard
Operations
Automation
Innovation
Market Data
NIST 800-53
Coordinating
Multitasking
Self-Starter
Communication
Data Analysis
Risk Analysis
Virtual Teams
Cyber Security
Subcontracting
Detail Oriented
Data Management
Change Requests
Team Leadership
Solution Design
Business Process
Computer Science
Business Writing
Defense In Depth
Network Security
Windows Defender
Secret Clearance
Security Controls
Security Policies
Matrix Management
Project Schedules
Influencing Skills
Service Management
Information Systems
Incident Management
Network Engineering
Security Engineering
Systems Architecture
IT Service Management
Information Assurance
MITRE ATT&CK Framework
Vulnerability Scanning
Data Transport Utility
Vulnerability Management
Vulnerability Assessments
Risk Management Framework
Authorization (Computing)
Cyber Security Assessment
IT Security Documentation
IAT Level III Certification
Standard Operating Procedure
Assessment And Authorization
Information Systems Security
ITIL Foundation Certification
Security Requirements Analysis
Milestones (Project Management)
Troubleshooting (Problem Solving)
Plan Of Action And Milestones (POA&M)
Department Of Defense (DoD) 8500 Series, *Bachelor's degree and 8-12 years of prior relevant experience or Master's with 6-10 years of prior relevant experience in Cybersecurity, Information Security, IT, EE, Network Engineering, Computer Science, or related field.
*Must be a US Citizen and possess an active DoD Secret Clearance.
*Hold an active security certification that meets DOD 8570 IAT level III or higher.
*Must have complete understanding of the RMF steps, especially Steps 4 through Steps 7.
*Ability to identify upon review of a system authorization boundary and its components to identify all applicable STIGs.
*Ability to decompose a security control/security check and ensure the provided artifact and test result satisfies said control/AP/check., *Hands-on experience in working with DoD networks.
*Experience in FISMA and other information assurance assurance-related compliance reporting.
*Attention to detail is a must.
*Ability to multi-task, self-assign work in a dynamic, fast-paced environment.
*Analytical, communication and troubleshooting skills that enable proactive and effective collaboration with a virtual team, including the ability to clearly articulate status and present to both customers and program leadership.
*Experience in one of the following areas: cybersecurity assessment, vulnerability scanning, integration and testing, data analytics or security operations.
*Experience leading cybersecurity tasks and collaborate with customers, stakeholders, and team members.
*Knowledge of cybersecurity assessment and authorization (A&A) and associated processes, procedures, and activities in accordance with DoDID 8500.01, DoDI 8551.01, the RMF Process Guide, the RMF Risk Assessment Guide, and other applicable NIST instructions, guidelines.
*Experience supporting the formal Cybersecurity/IA testing required by government accrediting authorities and preparing System Security Plans.
*Communication abilities, both verbal and written, including business writing on complex topics. Able to reach out across different teams and disciplines to include internal/external stakeholders.
*Understanding of supporting security initiatives, conducting security monitoring, reporting and maintaining security compliance following security regulations and policies.
*Knowledge of Security Engineering and Architecture, Assessment and Authorization, Vulnerability Assessment, Incident Management, Vulnerability Management, Security Operations, and Policy and Program Development.
*Motivated self-starter with ability to lead and work in a matrix organization and communicate effectively with peers and program leadership.

These Qualifications Would be Nice to Have:
*Top Secret Clearance.
*Hands-on experience in working with Cloud Authorizations.
*Hands-on experience in working with NMCI authorizations.
*Experience with ITIL processes and/or ITIL Foundation V4 certification.
*An entrepreneurial spirit with the ability to drive innovation independently; have a passion to improve at every opportunity.
*Proven ability to credibly coordinate between technical teams and business stakeholders.
*Willing to perform shift work.

## Description

Leidos is seeking a Senior Information System Security Engineer (ISSE) to support cybersecurity authorization related efforts for SMIT. SMIT is the largest IT services program for the Navy. Under the Service Management, Integration, and Transport (SMIT) program, the Leidos team will deliver the core backbone of the Navy's enterprise network (NMCI), including cybersecurity services, network operations, service desk, and data transport. Ultimately, the Leidos team will support the Navy in unifying its shore-based networks and data management to improve capability and service while also saving significant dollars by focusing efforts under one enterprise network.

What You'll Get to Do:
The ISSE will perform cybersecurity authorization services, including acting as a main point of contact for cybersecurity authorization related aspects to the assigned information systems, ensuring systems are maintained per security policies and procedures and maintaining compliance and ongoing reporting to management.

Responsibilities include:
*Serve as a primary information system security engineer (ISSE) for Authorization to Operate (ATO) packages under the Navy Risk Management Framework (RMF).
*Assist in the development and review of ATO submissions and coordinate all updates and corrections to assessment and authorization (A&A) artifacts.
*Evaluate software and hardware during pre-acquisition phases to determine its ability to meet minimum security requirements based on NIST SP 800-53 Rev 5 security controls.
*Author, review, coordinate and submit cybersecurity authorization required artifacts to eMASS (including change requests) to achieve milestones such as Interim Authority to Test (IATT) and ATO in accordance with the project schedule.
*Support conducting cybersecurity authorization activities to comply with all current Cybersecurity and IA manuals, instructions, and guides within the DoDI 8500.01, DON 5239, the RMF Process Guide, and the RMF Risk Assessment Guide.
*Continuously monitor system resources through automated scanning and implement automated reporting feeds to support cybersecurity authorizations.
*Verify patch compliance using the approved technical solution (i.e., Assured Compliance Assessment Solution (ACAS)), Information Assurance Vulnerability Alert (IAVA) compliance dashboards, and Microsoft Defender for Endpoints.
*Coordinate with local administrators to troubleshoot and elevate patching issues in a timely manner in order to meet patch compliance timelines.
*Assist with the implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of Security Technical Implementation Guide (STIG) checklists for systems, applications, developed code and other components.
*Independently develop and maintain system security documentation, including drafting, reviewing, editing and recommending guidance for Standard Operating Procedures (SOP), Tactics, Techniques, & Procedures (TTP), Plan of Action and Milestones (POA&M) and Federal Information Security Management Act (FISMA) Score Card.
*Participate in regular briefings with the customer on cybersecurity statuses, including preparing briefing materials. Work closely with government Cyber team to support ATO conditions and requirements.
*Support site visits / audits, including System Readiness Reviews (SRR).
*Ensure secure, effective and efficient operation of network systems, architecture, and topology.
*Assist with the development and application of business processes to ensure they have the appropriate level of security.
*Participate in strategic network, security, and operations new technology planning.
*As a cybersecurity authorization services security expert, assist the engineering managers in employing approved defense-in-depth principles and practices (e.g., defense-in-multiple places, layered defenses, and security robustness)
*Discuss and document the Ports, Protocols and Services (PPS) to include ensuring the dataflows are accurate, CAL boundaries crossed are compliant, and registrations with the AO are completed per DODI 8551.1.
*Develop innovative solutions to complex, cross-discipline cybersecurity authorization challenges spanning multiple technical areas.
*Serve as a technical point of contact with external stakeholders, including subcontractors and vendors, on cybersecurity authorization matters.
*Influence project and government team leadership on ISSE solution design, process, and approach decisions., *Understanding of techniques and tactics used to exploit systems (MITRE ATTACK) to determine risk and possible mitigations.
*Ability to understand technical mitigations/know resources to identify proper mitigating factors (i.e. https://attack.mitre.org/mitigations/enterprise/).
*Experience with eMASS to include control inheritance, TR Import, and POAM import functionality.
*Support conducting cybersecurity authorization activities to comply with all current Cybersecurity and IA manuals, instructions, and guides within the DoDI 8500.01, DON 5239, the RMF Process Guide, and the RMF Risk Assessment Guide.
*Verify patch compliance using the approved technical solution (i.e., Assured Compliance Assessment Solution (ACAS)), Information Assurance Vulnerability Alert (IAVA) compliance dashboards, and Microsoft Defender for Endpoints.
*Assist with the implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of Security Technical Implementation Guide (STIG) checklists for systems, applications, developed code and other components.
*Independently develop and maintain system security documentation, including drafting, reviewing, editing and recommending guidance for Standard Operating Procedures (SOP), Tactics, Techniques, & Procedures (TTP), Plan of Action and Milestones (POA&M) and Federal Information Security Management Act (FISMA) Score Card.
*Assist with the development and application of business processes to ensure they have the appropriate level of security.
*Discuss and document the Ports, Protocols and Services (PPS) to include ensuring the dataflows are accurate, CAL boundaries crossed are compliant, and registrations with the AO are completed per DODI 8551.1
*Hands-on experience with a variety of cybersecurity tools., Operations
Automation
Encryption
Cryptography
Key Management
Risk Management
Business Valuation
Enterprise Security
Quantum Cryptography
Full Stack Development
Business Transformation
Public Key Infrastructure
Application Programming Interface (API)
Federal Information Processing Standards (FIPS)
+0
Information Security Engineer
TEKsystems

Fort Collins, CO*Remote

TCP/IP
Firewall
Equities
Phishing
Operations
Leadership
Governance
Positivity
Communication
Investigation
Cyber Security
Cloud Services
Risk Management
Problem Solving
Customer Service
Network Security
Threat Detection
Security Controls
Incident Response
Digital Forensics
Business Valuation
Penetration Testing
Security Technology
GIAC Certifications
Time Off Management
Security Engineering
Cyber Threat Hunting
CompTIA Certification
Full Stack Development
Business Transformation
Vulnerability Management
Vulnerability Assessments
Cyber Threat Intelligence
Microsoft Defender Antivirus
Continuous Improvement Process
Virtual Private Networks (VPN)
Transport Layer Security (TLS)
Endpoint Detection And Response
Cisco Certified Network Associate
CompTIA Cybersecurity Analyst (CySA+)
Systems Security Certified Practitioner
GIAC Security Essentials Certification (GSEC)
Red Hat Certified System Administrator (RHCSA)
GIAC Global Industrial Cyber Security Professional
+0

Google Cybersecurity
Firewall Engineer
TEKsystems

Buffalo, NY*Remote

Firewall
Operations
Leadership
Consulting
Colocation
Data Centers
Traffic Flow
Communication
Problem Solving
Network Routing
Cloud Migration
Packet Analyzer
Network Security
Routing Protocols
Policy Management
Business Valuation
Security Engineering
Full Stack Development
Artificial Intelligence
Network Troubleshooting
Business Transformation
Border Gateway Protocol
Troubleshooting (Problem Solving)
+0
Login | JoinContact


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team)
- [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch)
- [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities)
- [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)