Cybersecurity Analyst

• Bachelor’s degree with 4+ years of related experience Additional experience may be considered in lieu of a degree.\n
• US Citizen; Currently possessing an active DoD Secret clearance with ability to upgrade to a TS/SCI clearance upon hire.\n
• DoD 8140-compliant baseline certification appropriate to the work role (e.g., IAT Level II)\n
• Experience applying the NIST Risk Management Framework (RMF) within DoD and Intelligence Community (IC) environments\n
• Experience with Intelligence Community Directive (ICD) 503\n
• Experience with cross-domain or segmented architectures\n
• Experience developing and documenting NIST SP 800-53 security controls\n
• Experience working in a Sensitive Compartmented Information Facility (SCIF) and on classified networks\n
• Excellent written and verbal communication skills, including the demonstrated ability to brief technical and non-technical customers and stakeholders\n
• Ability to collaborate effectively with a dispersed team\n, * Master’s degree with 2+ years of relevant experience.\n
• Active TS/SCI clearance.\n
• Experience developing and maintaining an authorization Body of Evidence\n
• Experience with eMASS, including eMASSter\n
• Experience with Evaluate-STIG\n
• Experience with Tenable Nessus\n
• Experience with Security Onion for network security monitoring (NSM)\n
• Experience with Jira and Confluence\n
• Understanding of TEMPEST requirements and assessments\n

As a Cybersecurity Analyst, you will develop multiple Risk Management Framework (RMF) Assessment and Authorization (A&A) packages. This includes documenting security controls, building a system scanning plan, maintaining Plans of Action and Milestones (POA&Ms), and assembling a Body of Evidence that validates control implementation. Key responsibilities include:\n \n \n

• Build and support a culture grounded in Leidos values, beliefs, and expectations, and in the highest standards of ethical and respectful behavior\n
• Plan and document the security of a complex, mission-critical defense network in accordance with the DoD RMF\n
• Plan, document, and obtain authorizations and approvals required by the Government Authorizing Official, including Interim Authorization to Test (IATT), Interim Authorization to Operate (IATO), Authorization to Operate (ATO), Authorization to Connect (ATC), and Interconnection Security Agreements (ISAs)\n
• Perform and review security assessments of computing environments to identify vulnerabilities and non-compliance with cybersecurity standards and regulations, and recommend mitigation strategies\n
• Validate and verify system security requirements definitions and analysis\n
• Analyze findings, prioritize risks, and track remediation to closure\n
• Partner with architects and system developers to identify and implement security functionality that ensures consistent application of security policies and solutions\n
• Assess Sensitive Compartmented Information (SCI) system threats and risks, and develop mitigations throughout the program life cycle\n
• Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for SCI systems and classified network operations\n