Cyber Security Analyst III

• Providing expert oversight to maintain continuous compliance through monitoring, validating, and enforcing operational security to ensure EDSO’s confidentiality, integrity, and availability
• Modifying and implementing secure network connectivity between Amazon Web Services and the USMC
• Evaluating and remediating potential security risks, where identified
• Evaluating and remediating potential cloud, network, host, application, identity, firewall, load-balancing, WAF, and CI/CD pipeline security risk
• Supporting DevSecOps pipeline administration, including secure code integration, configuration management, software deployment, vulnerability scanning, dependency scanning, secrets management, and CI/CD security controls
• Supporting Cloud and network logging, alerting, monitoring, incident response, vulnerability remediation, and continuous compliance activities
• Coordinating with platform engineers, network engineers, system administrators, developers, mission owners, and customer-support personnel to validate cyber security controls; maintain operational security; resolve cyber security incidents; support system changes; and sustain secure, reliable, and available IL6 cloud services
• Provides operations and customer support for all services, to include, but not limited to:
• Operating System Maintenance
• VPC Configuration
• Infrastructure as Code Tools
• Amazon Web Services (AWS)
• SCCA Network Components (Cisco Routers and F5 devices)
• SCCA firewall (Palo Alto)
• Identity and Access Management - Active Directory (AD)
• Multi-Factor Authentication
• Intrusion Detection and Intrusion Prevention System (IDS/IPS)
• Assured Compliance Assessment Solution (ACAS)
• Microsoft Defender
• Windows Server Update Services (WSUS)
• Online Certificate Status Protocol (OCSP)

• BS degree in engineering, physical science, physics, network security, computer science
• 10 years of experience in relevant technical field, to include: technology analysis and assessment, design definition, development of systems specification, systems analysis, systems architecture, systems/equipment integration, test & evaluation criteria
• Experience with DevSecOps practices, secure CI/CD pipelines, configuration management, infrastructure as code, and secure software-delivery processes
• Experience with cloud automation, and infrastructure-as-code tools (Ansible, Terraform, CloudFormation, Lambda)
• Experience with Python, JSON
• Experience supporting secure cloud networking, network segmentation, routing, firewall policies, and cloud connectivity
• Experience with Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), continuous monitoring, vulnerability management, and cyber security compliance
• Experience developing cyber security documentation, operational procedures, security-control evidence, remediation plans, risk registers, and technical reports
• Ability to identify operational cyber security risks, assess potential mission impact, recommend mitigation measures, and track remediation through closure
• Amazon Web Services (AWS) experience
• Five years of technical experience in cyber engineering, network infrastructure, networking, server virtualization, object-oriented programming, software development, software configuration, software installation, or cloud transition, and cyber security
• Desire to work in a secure lab environment
• Holds an CompTIA Security+ or higher certification

Desired Skills

• Experience with container security
• Experience supporting GitLab security capabilities, including code scanning, dependency scanning, secrets management, runner security, auditing, and CI/CD pipeline controls
• Experience with cloud security logging, monitoring, alerting, incident response, threat detection, and security-event analysis
• Experience reviewing and validating cloud, network, firewall, WAF, load-balancing, and identity-and-access-management configurations
• Network experience
• SAFe (Scaled Agile Framework) Experience
• Recognized expert who has demonstrated industry and/or public service (e.g., federal, state, or local)
• leadership in Information Technology services
• Experience may be concurrent

Clearance Information

SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.