Cybersecurity Technology Management Analyst

Description

The company provides consulting, technology solutions and support services to U.S. government, defense and intelligence clients.

This role covers cybersecurity engineering, information assurance and RMF work on a DoD agency's network infrastructure, including security authorization, compliance assessment, vulnerability management and building cybersecurity controls into the network across its full lifecycle.

Responsibilities

• Act as the go-to information assurance expert on IA architecture policy and procedure.
• Advise on identifying and building IA controls early in the acquisition process for new IT capabilities.
• Act as the main contact for enterprise boundary defense efforts, making sure the right IA controls are identified and deployed in line with agency IA and IT architecture.
• Oversee the design and rollout of enterprise IA solutions, including standards for access control across the enterprise.
• Bring IA and cybersecurity expertise to the enterprise network infrastructure.
• Back RMF work, covering security authorization and ongoing compliance monitoring.
• Write, review and keep current cybersecurity documents, RMF artifacts and security authorization packages.
• Help secure Authority to Operate and Authority to Connect for agency sites, networks and systems.
• Keep security documentation and authorization records current in eMASS.
• Build, track and update Plans of Action and Milestones (POA&Ms).
• Run cybersecurity risk assessments and judge how well deployed security controls work.
• Check network engineering changes against DoD, DISA and agency cybersecurity rules.
• Assess the security impact of network technology refreshes, equipment swaps and new system integrations.
• Help implement and assess DISA STIG requirements.
• Find cybersecurity weaknesses and risks and recommend fixes.
• Work with government security staff, network engineers and operations teams on compliance.
• Advise Technical Review Boards and Change Control Boards on cybersecurity requirements.
• Assess how USCYBERCOM alerts, advisories and directives affect the agency.
• Prepare security documents for network connections, memoranda of agreement and system interconnections.
• Help with annual security assessments, control validation and upkeep of authorizations.
• Recommend improvements to enterprise boundary protection, access control and network security.

Requirements

• At least 5 years of relevant experience, including certification and accreditation (C&A) work.
• 10 years of practical IT management experience across industry, government or consulting.
• Experience running IT projects with Microsoft tools.
• Experience managing IT services and strategy.
• Proficiency in Excel, Access, Word, PowerPoint and SharePoint.
• High school diploma.
• US citizenship is required.
• Secret clearance with a Tier 3/NACLC/ANACI investigation.
• DoD 8570/8140 IAM Level III baseline certification: CISM, CISSP or GSLC.
• Cisco Certified Network Associate (CCNA).
• Preferred: 10 years of relevant C&A experience, including NIST C&A work and Department of War information assurance experience.

Conditions

Most work is done at a contractor-owned facility near Fort Belvoir, VA, plus customer sites.

Onsite work or living within commuting distance of one of these locations is accepted: Fort Belvoir, VA (highly preferred); Battle Creek, MI; Columbus, OH; Dayton, OH; New Cumberland, PA; Ogden, UT; Philadelphia, PA; Richmond, VA; Anniston, AL; San Diego, CA; Fort Bragg, NC; Robins AFB, GA; Tobyhanna, PA.

Long stretches of hours at a computer in an office setting.

Projected salary: $120,000+ per year. Final pay depends on years of relevant experience, active clearance level, certifications, technical skills, contract requirements and overall qualifications.

Benefits

• 26 days of paid leave covering vacation, sick time, personal time and holidays, used as you choose.
• Performance bonuses tied to individual contribution and company-wide results.
• 401(k) with a 3% employer match, vesting immediately.
• Company-paid life insurance up to $300K, with optional extra cover for you and your dependents.
• Multiple medical plans, dental, vision, FSA and HSA options.
• 15 days of fully paid parental leave for new parents.
• Military differential pay for employees on active duty, so pay does not drop while they serve.
• Training and certifications paid by the company, tuition reimbursement, and the equipment and technology needed to do the job.
• If the company is sold, the CEO has committed to returning 80% of net proceeds to employees.