Systems Security Analyst

• Assess configuration management, change management, and release-management processes for security impact and compliance.\n
• Develop procedures and support testing of system failover and transfer of operations to alternate sites based on system availability requirements.\n
• Analyze and report organizational cybersecurity-posture trends.\n
• Analyze and report system cybersecurity-posture trends.\n
• Ensure system security operations and maintenance activities are properly documented and updated as required.\n
• Evaluate cybersecurity-enabled products and compensating security controls to determine whether identified risk has been reduced to an acceptable level.\n
• Assess access controls based on principles of least privilege and need-to-know.\n
• Implement security measures to resolve vulnerabilities, mitigate risk, and recommend security changes to systems or system components as required.\n
• Implement system security measures in accordance with established procedures to support confidentiality, integrity, availability, authentication, and non-repudiation requirements.\n
• Mitigate or correct security deficiencies identified during security or certification testing and recommend risk acceptance when appropriate for consideration by the authorized Government representative.\n
• Verify minimum security requirements are implemented for applications and systems.\n
• Plan and recommend system modifications or security adjustments based on exercise results or changes to the operating environment.\n
• Maintain documentation of system security implementation, operations, and maintenance activities.\n
• Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities.\n
• Verify and update cybersecurity documentation to accurately reflect application and system security-design features.\n
• Conduct research and analysis to support cybersecurity performance improvement and mission objectives.\n
• Work independently and collaboratively with project, technical, cybersecurity, and Government stakeholders.\n
• Perform other duties as assigned.\n

• Bachelor’s degree in Cybersecurity or a related field.\n
• 3+ years of relevant cybersecurity experience.\n
• Current Top Secret/SCI security clearance with ability to obtain additional or higher read-ins as required.\n
• Must meet DoD 8140 / Defense Cyber Workforce Framework (DCWF) Work Role 511 - Cyber Defense Analyst qualification requirements / IAT Level II certification.\n
• Knowledge of encryption technologies and algorithms, including:\n, * Knowledge of IT security principles and methods, including firewalls, demilitarized zones, and encryption.\n
• Knowledge of network access, identity, and access-management concepts, including Public Key Infrastructure (PKI).\n
• Knowledge of operating systems.\n
• Knowledge of network traffic and communications, including TCP/IP, the OSI model, and Information Technology Infrastructure Library (ITIL) concepts.\n
• Knowledge of how system components are installed, integrated, and optimized.\n
• Knowledge of various computer architectures.\n
• Knowledge of network-design processes, including security objectives, operational objectives, and associated tradeoffs.\n
• Knowledge of network-analysis tools used to identify vulnerabilities.\n
• Skill in designing integration of hardware and software solutions.\n
• Ability to determine how a security system should operate, including resilience and dependability requirements, and assess how changes in conditions, operations, or the environment may affect system-security outcomes.\n

n Leidos is seeking an experienced Systems Security Analyst to support an Air Force Cybersecurity Service Provider (CSSP) mission.\n \n The Systems Security Analyst will assess system security controls and cybersecurity posture, identify and mitigate security deficiencies, support implementation of security requirements, and provide cybersecurity recommendations to Government and technical stakeholders.\n \n The successful candidate will apply cybersecurity, information assurance, and risk-management principles to evaluate system security, support remediation, maintain security documentation, and ensure appropriate security controls are implemented and operating effectively.\n \n \nPrimary Responsibilities\n \n \n \n

• Assess the effectiveness of system security controls.\n, * Knowledge of cybersecurity principles and organizational requirements related to confidentiality, integrity, availability, authentication, and non-repudiation.\n