Cyber Security Analyst - POA&M's

Company: TestPros, Inc.
Location: Kearneysville
Posted on: February 25, 2021

Job Description:

Job SummaryTestPros is seeking to fill a Cyber Security Analyst position on a USCG contract located in Kearneysville, WV. The ideal candidate will support our customer with maintaining a Cybersecurity Compliance and Metrics (CCM) program.--A successful candidate demonstrates 5 years' direct experience and knowledge in oral and written technical communication skills; regulatory interpretation, risk analysis; MS Office products (Access, Excel (formulas, pivot tables), Visio, SharePoint); industry tools such as STIG Viewer, ACAS, HBSS, IACS (XACTA), CMRS, EMASS, SCCM, Hyena.The Cybersecurity Engineer will report directly to the CCM Project Manager, while independently engaging in enterprise and system level cybersecurity-related analytical tasks.Position: Full-TimeLocation: Kearneysville, VAClearance: Secret (Required)Citizenship: U.S. citizenship is requiredTechnical Responsibilities* Conduct reviews of NIST, OMB, DHS, DoD, FISMA policies, mandates, and vendor publications related to enterprise technologies and recommend changes to organizational policy and procedures affected by new guidance.* Support authoritative order review, research, impact assessment, distribution, compliance determination, tracking, and reporting.* Monitor identified vulnerabilities throughout their lifecycle from discovery to mitigation using ACAS, HBSS, STIG Viewer or other industry tools.* Facilitate the Plan of Actions and Milestones (POA&M) program to ensure customer systems have accurately and fully provided information for POA&M activities to include valid remediation of findings.* Develop, implement, validate, and maintain metrics and dashboards for command consumption.* Capture, store, analyze and present Cybersecurity data for stakeholder situational awareness at appropriate command and senior management levels both local and enterprise wide.Communications/Documentation Responsibilities* Participate in the development, review and de-confliction of customer information system security policy and standards, including writing guidelines, standards, procedures, and other technical documentation (technical roadmaps, project plans, etc.).* Support the development and maintenance of system asset lists, hardware, and software baselines.* Provide detailed security-related reports including data, analyses, and conclusions upon completion of tests, scans, and assessments, including mitigations and, if indicated, appropriate escalation of identified risks and vulnerabilities.* Develop, implement, and maintain POA&M training and guidance documents for the benefit of organizational personnel.* Keep management apprised of impending areas of concern, verbally and in writing.* Comfortable conveying project/task material to individuals, small and large groups.Leadership Responsibilities* Manage project scope and expectations to ensure requirements are understood, enabling swift delivery while maintaining communication with project-level stakeholders.* Maintain and/or increase proficiency of their knowledge of the latest security analyst techniques and technologies, advances in combating unauthorized access to information systems, and industry best practices.* Assist IA team members with keeping up to date on latest security techniques and technologies, advances in combating unauthorized access to information systems, and industry best practices.Required Qualifications & Skills* U.S. Citizenship* Secret Clearance* Bachelor's degree or higher in an Information Technology field or equivalent work experience.* 5 years of direct experience and knowledge in oral and written technical communication skills, regulatory interpretation, risk analysis, etc.* Experience with MS Office products (Access, Excel (formulas, pivot tables), Visio, SharePoint) and industry tools such as STIG Viewer, ACAS, HBSS, IACS (XACTA), CMRS, EMASS, SCCM, Hyena.* Possession of one of these IAT Level II Security Certifications:* Cisco Certified Network Associate - Security (CCNA Security)* CompTIA Cybersecurity Analyst (CySA+)* Global Industrial Cyber Security Professional (GICSP)* GIAC Security Essentials (GSEC)* CompTIA Security+ (SEC+ CE)* Certified Network Defender (CND)* ISC2 Systems Security Certified Practitioner (SSCP)Desired Qualifications & Skills* DoD Task Order, STIG, IAVM knowledge

Keywords: TestPros, Inc., Germantown , Cyber Security Analyst - POA&M's, Professions , Kearneysville, Maryland