Cyber Security Analyst

GovCIO; Sumter (SC); On-site; USD 143,000 - 160,000; Full time

Job summary

GovCIO is hiring a Cybersecurity Analyst to support Air Combat Command missions at Shaw AFB, SC. The role focuses on cybersecurity, compliance, and accreditation, ensuring RMF, TEMPEST, and ATO across NIPR, SIPR, and DRSN enclaves.

The analyst will maintain Xacta/eMASS artifacts, support vulnerability management, patching, and continuous monitoring while coordinating with authorities to uphold security controls and compliance across multiple systems.

Qualifications

• High school diploma with 10+ years experience or commensurate experience.
• Top Secret w/ SCI clearance required.
• Strong RMF, NIST and USDOW cybersecurity standards knowledge.
• Xacta, eMASS and vulnerability scanning tools experience.
• Network enclave support (NIPR, SIPR, DRSN).

Responsibilities

• Correlates threat data from various sources to identify hackers and threats.
• Provides assessments and reports to facilitate situational awareness.
• Develops cyber threat profiles by region, group, or actors.
• Produces cyber threat analyses and intelligence reports for leadership.
• Researches threats, vulnerabilities, and countermeasures to improve defense.

Skills

Top Secret w/ SCI clearance

RMF

NIST standards

Xacta

eMASS

Vulnerability scanning

NIPR/SIPR/DRSN

Threat intelligence

Education

High School diploma with 10+ years experience

Tools

Xacta

eMASS

Vulnerability scanning tools

Job description

Overview GovCIO is hiring a Cybersecurity Analyst to provide cybersecurity, compliance, and accreditation support for Air Combat Command (ACC) missions at Shaw AFB, SC ensuring the implementation, maintenance, and continuous monitoring of NIPR, SIPR, and DRSN enclaves. This role supports Risk Management Framework (RMF), TEMPEST, and Authority to Operate (ATO) requirements across multiple systems and secure network environments. This is an onsite position at Shaw AFB, SC.

Responsibilities

Correlates threat data from various sources to establish the identity and modus operandi of hackers active in client's networks and posing a potential threat. Provides the customer with assessments and reports facilitating situational awareness and understanding of current cyber threats and adversaries. Develops cyber threat profiles based on geographic region, country, group, or individual actors. Produces cyber threat assessments based on entity threat analysis. May provide computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments. Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.

• Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyberthreats to the client.
• Provides timely and actionable sanitized intelligence to cyber incident response professionals.
• Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture.
• Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks.
• Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership.

RMF & Accreditation Support

• Prepare, update, and maintain Xacta and eMASS project artifacts in support of DRSN ATO.
• Establish Security Control testing procedures and measure effectiveness of implemented Security Controls.
• Manage Xacta and eMASS projects throughout the RMF lifecycle of DRSN system.
• Coordinate with Authorizing Official to understand and implement security control/overlay changes as required.
• Review and update RMF artifacts including:
  • System Security Plans (SSPs)
  • Configuration Management Plans
  • Security Assessment Reports
  • POA&Ms
  • Continuous Monitoring Checklists

Cybersecurity Compliance & Vulnerability Management

• Review vulnerability scans and perform corrective actions across all system hardware and software.
• Ensure systems are configured and validated in compliance with STIG requirements.
• Conduct vulnerability and compliance scanning as part of continuous monitoring schedules.

Technical Cyber Support

• Assess, update, and maintain documentation for DRSN, NIPR, and SIPR ATO packages.
• Serve in an Information System Security Manager (ISSM) capacity for supported systems.
• Support patch management, antivirus updates, and secure configuration enforcement across enclaves.
• Provide cybersecurity support aligned with the 20 CS missions to deliver full spectrum cyberspace capabilities to Combatant Commanders to expand decision space to defeat and deter adversaries.

Qualifications

High School with 10+ years (or commensurate experience)

Required Skills And Experience

• Clearance Required: Top Secret w/ SCI
• IAM Level 2 or higher
• Strong knowledge of RMF, NIST and USDOW cybersecurity standards
• Xacta, eMASS and vulnerability scanning tools
• Network enclave support (NIPR, SIPR, DRSN)
• Knowledge of TEMPEST requirements

Preferred Skills And Experience

• Cyber security experience supporting USAF communications squadrons
• Enterprise-level ATO support

Posted Salary Range: USD $143,230.00 - USD $160,000.00 /Yr.