The Analyst II will provide support to large computing systems and state of the art solutions to a wide range of technical problems for classified programs and projects. The Analyst II will design, install, configure, secure, troubleshoot, and maintain operating systems for mission critical equipment, devices, systems, and networks in support of training programs. This position will perform duties as an Information Systems Security Officer (ISSO) in an information assurance/cybersecurity work center. As the GBSI Lead, the Analyst II will perform supervisor duties as described below.
Roles and Responsibilities
- Supports system design and troubleshooting data collection and delivery methods for real-time Cyber Defense Operations;
- Implements Risk Management Framework, including Assessment and Accreditation (A&A);
- Provides STIG and IAVM Support;
- Maintains systems in accordance with DoD policies and procedures;
- Maintains baseline systems in accordance with DoD Certification and Accreditation (C&A) requirements;
- Reviews ACAS scans for compliance;
- Develops IA compliance reports;
- Utilizes EMASS for documentation management;
- Utilizes Remedy ticketing system for trouble management documentation;
- Provides support for the escalation and communication of status to DoD agencies and internal customers;
- Conducts risk assessments on systems, networks, CS processes, and operations;
- Ensures information is protected against unauthorized access, disclosure, misuse, disruption or modification;
- Performs information assurance analysis, scanning, remediation, vulnerability assessments, and maintains all required and applicable artifacts;
- Updates antivirus/anti-malware and other component definitions daily on training networks;
- Develops, collects, contributes, and provides RMF/C&A artifacts. Artifacts include hardware and software lists, identification of ports, protocols, and services, accreditation boundary diagrams, data flow diagrams, mitigation plans, vulnerability scans, and other related artifacts;
- Assists with security reviews, monitors, and enforces IA policies and procedures, and performs Cyber risk management, risk analysis, and remediation;
- Performs IA through all stages of system acquisition, development, implementation, and maintenance;
- Performs security monitoring on applicable networks and immediately reports to ISSM any detection of a virus, spillage, incident, event, or lack of ability to meet an IA safeguard;
- Ensures Information Assurance Vulnerability Alert (IAVA)/IA Directive compliance to include IAVM, ALCND, EXORDs, FRAGORDs, NCDOC Directives, and HBSS;
- Installs/Tests/Deploys IAVA/STIG security patches/configurations and provides applicable security artifacts/reports/status;
- Implements and completes Security Technical Implementation Guide (STIG) checklists for applicable systems/networks;
- Conducts applicable daily/monthly/quarterly auditing tasks such as system, application, and security log review, and configuration baseline review;
- Monitors and reports on DoD and DoN mandated safeguards;
- Configures and deploys the full HBSS suite and underlying operating system in accordance with DoD Cyber Tasking Orders (CTOs) and established policies;
- Performs day-to-day administration, test, and monitor framework and infrastructure;
- Develops technical SOPs, performs testing and validation, develops signatures, and audit controls;
- Conducts routine compliance audits, security log reviews, security incident responses, and low-level troubleshooting;
- Establishes metrics, monitors the HBSS program, monitors threats, and provides briefs and reports;
- Develops operational processes, models, and frameworks to meet operation and security requirements;
- Remains compliant with current software configuration requirements.