Cyber Security Analyst

Cyber StrategiX; Fort Gregg-Adams (VA); On-site; USD 100,000 - 145,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401k contribution

Job summary

Cyber StrategiX is seeking an experienced Cybersecurity Analyst for the Defense Contract Management Agency (DCMA) to evaluate drone system cybersecurity and remediation plans. You will review assessment reports, identify vulnerabilities, and advise on risk mitigation in support of military applications.

Fort Lee, VA on-site position requiring DoD clearance readiness and DoD RMF expertise. 40 hours/week, full-time with comprehensive benefits and competitive salary.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline.
• Minimum five years of practical experience preferred.
• Active DoD 8570/8140 IAM or IAT Level II/III certification required (e.g., CISSP, CISM, or CompTIA Security+).
• Experience applying NIST SP 800-53 controls and RMF for ATO.

Responsibilities

• Serve as SME supporting cybersecurity evaluation of product submissions.
• Provide technical advisory on cybersecurity requirements, standards, risk management, and assessment methodologies.
• Apply knowledge of cybersecurity for embedded systems, software, firmware, wireless, networking, encryption, and supply chain security.
• Interpret assessment methodologies, pen tests, vulnerability assessments, and firmware analyses.
• Review assessment reports and evidence to evaluate completeness and sufficiency for government acceptance decisions.
• Identify vulnerabilities, threats, attack vectors, and residual risks affecting missions and security.
• Provide recommendations on remediation findings and risk mitigation strategies.
• Verify whether remediation plans would mitigate identified vulnerabilities.
• Maintain awareness of applicable DoD statutes, RMF, and cyber frameworks relevant to Blue List Program.

Skills

Cybersecurity analysis

Embedded systems security

RMF

NIST SP 800-53

Vulnerability assessment

Risk management

Education

Bachelor's degree in Cybersecurity or related field

Tools

NIST RMF

CISSP/CISM

Job description

Cybersecurity Analyst

ROLE

We need an experienced Cybersecurity Analyst at the Defense Contract Management Agency (DCMA). This role supports the cybersecurity evaluation of drone systems and components submitted for review under the Blue UAS Cleared List Program, which determines which commercial unmanned aircraft technologies are secure enough for military and government use. In this role, you will serve as a technical subject matter expert reviewing cybersecurity assessment reports, identify vulnerabilities and residual risks affecting DoW missions, and validate whether submitted remediation plans sufficiently mitigate identified vulnerabilities. This is a full-time opportunity. We can offer a competitive salary, and a comprehensive benefits package.

RESPONSIBILITIES

• Serves as a technical subject matter expert supporting the cybersecurity evaluation of product submissions
• Provides technical expertise and advisory support regarding cybersecurity requirements, technical standards, risk management, and assessment methodologies
• Applies demonstrated knowledge of cybersecurity principles applicable to embedded systems, software, firmware, wireless communications, networking, encryption, authentication, and supply chain security
• Interprets cybersecurity assessment methodologies, penetration testing results, vulnerability assessments, software assurance evaluations, and firmware analyses
• Reviews cybersecurity assessment reports, supporting technical documentation, and assessment evidence to evaluate completeness, technical sufficiency, and adequacy in support of Government technical acceptance decisions
• Identifies cybersecurity vulnerabilities, threats, attack vectors, and residual risks affecting DoW missions, warfighter safety, and national security
• Provides technical recommendations regarding cybersecurity findings, risk mitigation strategies, and applicability of cybersecurity requirements to Blue List candidate technologies
• Verifies and validates whether a company's submitted remediation plan would sufficiently mitigate identified cyber vulnerabilities
• Maintains awareness of applicable Federal statutes, DoW policies, NDAA requirements, and cybersecurity frameworks relevant to the Blue List Program
• Monitors emerging cybersecurity threats, vulnerabilities, and policy developments affecting small unmanned systems and related technologies

BACKGROUND/REQUIRED EXPERIENCE

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline
• Minimum of five (5) years of practical experience preferred
• Active DoW 8570/8140 IAM or IAT Level II or III certification (e.g., CISSP, CISM, or CompTIA Security+) required
• Demonstrated expertise applying NIST SP 800-53 controls, NIST SP 800-161 (SCRM), and navigating the DoW Risk Management Framework (RMF) to achieve an Authority to Operate (ATO)

LOCATION

• Fort Lee, VA – DCMA Facility

CLEARANCE

• Active or interim DoW security clearance; favorably adjudicated Tier 3 background investigation required
• Must be a US Citizen

CLIENT

• Defense Contract Management Agency (DCMA), Unmanned Systems-Experimental (US-X) command

HOURS

• 40 hours per week
• 8 hours per day

EMPLOYMENT CLASSIFICATION

• Employment Classification Eligibility – W2

RELOCATION

• Not eligible for relocation benefits

COMPENSATION

• Salary range: $100,000 – $145,000
• Benefits: Benefits package includes options for health, dental, and vision insurance coverage; 401k contribution options. Full benefits brochure available for review.

West 4th Strategy is an Equal Opportunity (EEO) employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, gender, sexual orientation, ancestry, national origin, age, marital status, mental disability, physical disability, medical condition, pregnancy, political affiliation, military or veteran status, or any other basis prohibited by federal or state law.

Other Considerations

This position is W-2 only; no Corp-to-Corp or 1099 candidates. Relocation will not be offered. This position requires access to Department of Justice facilities and systems. As a condition of employment, selected candidates must complete and receive favorable adjudication from a federal government background investigation as required by the U.S. Department of Justice. Individual’s primary workstation is located in an office area. The noise level in this environment is low to moderate. Regularly required to sit for extended periods up to 80% of the time; frequently required to move about to access file cabinets and use office equipment such as PC, copier, fax, telephone, cell phone, etc. Occasionally required to reach overhead, bend, and lift objects of up to 10 lbs. Specific vision abilities required by this job include the use of computer monitor screens up to 80% of the time.