Principal Cybersecurity Analyst

Description

The company's aeronautics systems area is hiring a principal cyber systems analyst to join its team.

The role depends on program funding, and start dates are set once funding is confirmed.

Work covers security assessment, certification and accreditation support, and documentation across systems and networks.

Responsibilities

• Assess systems and networks to find where they deviate from approved configurations and from enclave or local policy, using compliance audits and vulnerability assessments.
• Set up strict program controls that reduce risk and support system certification and accreditation.
• Support process work, analysis, coordination, security certification testing, documentation, investigations, software and hardware research and release, emerging technology inspections, and periodic audits.
• Help apply government policy such as NISPOM and DCID 6-3, suggest changes to how processes are tailored, and record process activities.
• Analyse security requirements, then recommend additional requirements and safeguards.
• Support each government accrediting authority's formal Security Test and Evaluation by preparing before tests, taking part in them, analysing results, and writing reports.
• Record certification and accreditation results and technical or coordination activity, prepare system Security Plans, and update the Plan of Actions and Milestones (POA&M).
• Review each system's audits on a regular schedule and track corrective actions until they are closed.

Requirements

• A bachelor's degree from an accredited university and 5 years of cybersecurity experience, or a master's degree and 3 years of experience, or a PhD and 1 year of experience.
• Familiarity with DoD system security engineering activities, including security requirements engineering, risk assessment and management, secure architecture design, implementation, and verification.
• The ability to obtain and keep a final adjudicated U.S. government Secret clearance and any program access the role needs within a reasonable time, as the company decides.
• A DODD 8140.01 qualifying certification such as CompTIA Security+, CISSP, or a similar network or security certification, or the ability to earn one.
• Preferred: experience with the Risk Management Framework (RMF), including writing System Security Plans, Assessment Reports, attack path modeling, and mitigation strategies.
• Preferred: experience working on a multidisciplinary team and writing technical proposals.
• Preferred: strong communication and interpersonal skills, with the ability to work with all levels of staff and management.
• Preferred: familiarity with U.S. government Anti-Tamper (AT) processes and implementations.
• Preferred: an active U.S. government Top Secret clearance.
• Preferred: Special Program Access.
• Preferred: ASMT MPR Blue ICS.

Conditions

Top Secret clearance is required before start.

Relocation support may be available.

Travel is required for about 10% of the time.

The primary base salary range is $98,400.00 to $147,600.00. Final pay depends on the scope of the role, the candidate's experience, education, skills, and current market conditions.

The application period is estimated at 20 days from the posting date, and may be shortened or extended based on business needs and candidate availability.

Benefits

• Depending on the role, overtime, shift differential, and a discretionary bonus may be available on top of base pay.
• Annual bonuses reward individual contributions and share company results with employees.
• Vice President and Director roles may be eligible for Long Term Incentives.
• Health insurance, life and disability insurance, a savings plan, paid company holidays, and paid time off for vacation and personal business.