Cyber Security Analyst

GovCIO; Hampton (VA); On-site; USD 143,000 - 165,000; Full time

Job summary

GovCIO in Virginia is seeking a Cybersecurity Analyst to provide cybersecurity, compliance, and accreditation support for Air Combat Command missions at Langley AFB, VA. This onsite role ensures RMF, TEMPEST, and ATO requirements across NIPR, SIPR, and DRSN enclaves are implemented and continuously monitored.

The ideal candidate will correlate threat data, produce threat assessments, support RMF lifecycle with Xacta/eMASS, conduct vulnerability management per STIG, and provide security

Qualifications

• High School diploma or equivalent with 10+ years experience (as stated)
• Strong knowledge of RMF, NIST standards and USDOW cybersecurity standards
• Experience with Xacta, eMASS and vulnerability scanning tools

Responsibilities

• Correlates threat data to identify hackers and provide assessments and reports
• Develops cyber threat profiles and produces threat assessments
• Provides cyber threat intelligence to incident response professionals
• Researches hackers and vulnerabilities and briefs leadership
• Supports RMF lifecycle tasks and coordination with Authorizing Official

Skills

RMF knowledge

NIST standards

Threat intelligence

Education

High School diploma or equivalent

Tools

Xacta

eMASS

Vulnerability scanners

Job description

GovCIO is hiring a Cybersecurity Analyst to provide cybersecurity, compliance, and accreditation support for Air Combat Command (ACC) missions at Langley AFB, VA ensuring the implementation, maintenance, and continuous monitoring of NIPR, SIPR, and DRSN enclaves. This role supports Risk Management Framework (RMF), TEMPEST, and Authority to Operate (ATO) requirements across multiple systems and secure network environments. This is an onsite position Langley AFB, VA.

Responsibilities

Correlates threat data from various sources to establish the identity and modus operandi of hackers active in client's networks and posing a potential threat. Provides the customer with assessments and reports facilitating situational awareness and understanding of current cyber threats and adversaries. Develops cyber threat profiles based on geographic region, country, group, or individual actors. Produces cyber threat assessments based on entity threat analysis. May provide computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments. Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.

• Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyberthreats to the client.
• Provides timely and actionable sanitized intelligence to cyber incident response professionals.
• Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture.
• Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks.
• Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership.

RMF & Accreditation Support

• Prepare, update, and maintain Xacta and eMASS project artifacts in support of DRSN ATO.
• Establish Security Control testing procedures and measure effectiveness of implemented Security Controls.
• Manage Xacta and eMASS projects throughout the RMF lifecycle of DRSN system.
• Coordinate with Authorizing Official to understand and implement security control/overlay changes as required.
• Review and update RMF artifacts including:
  • System Security Plans (SSPs)
  • Configuration Management Plans
  • Security Assessment Reports
  • POA&Ms
  • Continuous Monitoring Checklists

Cybersecurity Compliance & Vulnerability Management

• Review vulnerability scans and perform corrective actions across all system hardware and software.
• Ensure systems are configured and validated in compliance with STIG requirements.
• Conduct vulnerability and compliance scanning as part of continuous monitoring schedules.

Technical Cyber Support

• Assess, update, and maintain documentation for DRSN, NIPR, and SIPR ATO packages.
• Serve in an Information System Security Manager (ISSM) capacity for supported systems.
• Support patch management, antivirus updates, and secure configuration enforcement across enclaves.
• Provide cybersecurity support aligned with the 20 CS missions to deliver full spectrum cyberspace capabilities to Combatant Commanders to expand decision space to defeat and deter adversaries.

Qualifications

High School with 10+ years (or commensurate experience)

Required Skills and Experience

• Clearance Required: Top Secret w/ SCI
• Strong knowledge of RMF, NIST and USDOW cybersecurity standards
• Xacta, eMASS and vulnerability scanning tools
• Network enclave support (NIPR, SIPR, DRSN)
• Knowledge of TEMPEST requirements

Preferred Skills and Experience

• Cyber security experience supporting USAF communications squadrons
• Enterprise-level ATO support

#NSS #DL #TM

Posted Salary Range

USD $143,230.00 - USD $165,000.00 /Yr.