Cyber Security Analyst I VM (Journeyman) - ECCOS

Technology,-Automation,-and-Management,-Inc.; Colorado Springs (CO); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Relocation Assistance

Sign-on Bonus

Travel Requirements

Job summary

TeAM, Inc. seeks a Cyber Security Analyst I VM (Journeyman) to support Enterprise Vulnerability Management for Mission Delta 6. The role focuses on transforming vulnerability data into actionable analysis for government leadership and system owners.

Under supervision, you will analyze scans, track remediation actions, validate CMRS data, and prepare risk reporting. The position requires collaboration with system administrators and cybersecurity stakeholders onsite in Colorado Springs.

Qualifications

• Must have strong vulnerability-analysis skills and ability to translate findings into actionable remediation actions.
• Experience in tracking Plans of Action and Milestones (POA&Ms) and related reporting.
• Ability to prepare technical summaries and risk reporting for senior stakeholders.
• Experience validating vulnerability findings and supporting remediation actions.
• Awareness of CMRS, DoD Scorecards, and regulatory reporting requirements.

Responsibilities

• Analyze vulnerability scan output to identify anomalies and trends.
• Validate data from government sources for accuracy and traceability.
• Support POA&M tracking and risk reporting activities.
• Prepare findings packages and supporting documentation for leadership.
• Coordinate with system owners and engineers to clarify findings and evidence.

Skills

Vulnerability analysis

POA&M tracking

CMRS reporting

Cybersecurity risk reporting

Data validation

Education

Bachelor’s degree

Tools

Tenable

ACAS

Nessus

Power BI

Job description

Cyber Security Analyst I VM (Journeyman) - ECCOS

EOE Statement

Technology Automation & Management (TeAM), Inc.

TeAM is looking for highly motivated and highly skilled individuals who are ready for exciting opportunities with a growing company. For more than a quarter of a century, we've built our reputation as a premier solutions provider to the Federal Government, and eagerly seek creative problem solvers to join our TeAM.

We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law.

Description

Pending Contract Award

Mission Objectives - ECCOS provides Enterprise Vulnerability Management (EVM) support to Mission Delta 6. The Cyber Security Analyst I VM (Journeyman) positions support the EVM cell by transforming vulnerability-scan results, remediation information, assessment findings, and configuration data into accurate, actionable analysis for senior EVM personnel, system owners, and Government leadership.

Working under the direction of the Senior EVM Analysts, these positions analyze vulnerability scan output, assess compliance incidents, track remediation commitments and Plans of Action and Milestones (POA&Ms), prepare vulnerability-management risk reporting, validate data supporting CMRS and Scorecard submissions, and maintain component-level configuration information. The three analysts are cross-trained to sustain continuity across EVM activities during personnel absences, inspections, exercises, surge events, crises, and contingencies.

Position Responsibility Summary (by CLIN focus):

CLIN 0007 - Scan Analysis and Compliance Assessment

• Analyze vulnerability scan output to identify anomalies, recurring weaknesses, data-quality issues, unusual trends, incomplete scan coverage, aging vulnerabilities, and conditions requiring senior EVM analyst or Government stakeholder attention.
• Validate and organize scan findings using Government-provided vulnerability-management tools, repositories, trackers, and data sources; ensure records are accurate, complete, traceable, and suitable for further analysis.
• Assess cybersecurity compliance incidents by collecting relevant technical information, reviewing applicable requirements and evidence, documenting observations, identifying affected systems or stakeholders, and supporting the development of corrective actions.
• Support the Senior EVM Analysts in validating vulnerability findings, determining probable impact, identifying remediation dependencies, and tracking corrective action through closure.
• Prepare technical summaries, scan-analysis products, status reports, findings packages, and supporting documentation for system owners, cybersecurity personnel, and Government leadership.
• Coordinate with system administrators, system owners, engineers, and cybersecurity stakeholders to clarify vulnerability findings, validate remediation status, resolve data discrepancies, and obtain required evidence.
• Maintain documentation, trackers, evidence repositories, and data records in accordance with Government procedures, classification requirements, and established EVM quality-control practices.
• Serve as the trained alternate for CLIN 0008, supporting POA&M monitoring, remediation tracking, and EVM risk-trend reporting when required.
• Alternate: CLIN 0008

CLIN 0008 - POA&M Tracking and Risk Reporting

• Monitors and tracks Plans of Action and Milestones (POA&Ms) (PWS 3.3)
• Produces risk trend reporting (PWS 3.3) Analyze vulnerability scan output to identify anomalies, recurring weaknesses, data-quality issues, unusual trends, incomplete scan coverage, aging vulnerabilities, and conditions requiring senior EVM analyst or Government stakeholder attention.
• Validate and organize scan findings using Government-provided vulnerability-management tools, repositories, trackers, and data sources; ensure records are accurate, complete traceable, and suitable for further analysis.
• Assess cybersecurity compliance incidents by collecting relevant technical information, reviewing applicable requirements and evidence, documenting observations, identifying affected systems or stakeholders, and supporting the development of corrective actions.
• Support the Senior EVM Analysts in validating vulnerability findings, determining probable impact, identifying remediation dependencies, and tracking corrective action through closure.
• Prepare technical summaries, scan-analysis products, status reports, findings packages, and supporting documentation for system owners, cybersecurity personnel, and Government leadership.
• Coordinate with system administrators, system owners, engineers, and cybersecurity stakeholders to clarify vulnerability findings, validate remediation status, resolve data discrepancies, and obtain required evidence.
• Maintain documentation, trackers, evidence repositories, and data records in accordance with Government procedures, classification requirements, and established EVM quality-control practices.
• Serve as the trained alternate for CLIN 0008, supporting POA&M monitoring, remediation tracking, and EVM risk-trend reporting when required.
• Alternate: CLIN 0009

CLIN 0009 - CMRS and Scorecard Data, Configuration Data

• Prepare, validate, reconcile, and organize data supporting Congressionally Mandated Report Submissions (CMRS), Department of War Scorecards, and other Government-directed vulnerability-management reporting requirements.
• Collect data from Government-provided vulnerability-management repositories, scan outputs, trackers, configuration records, and stakeholder inputs; perform quality checks to identify incomplete, inaccurate, duplicate, untimely, or inconsistent information.
• Manage component-level configuration data used to support vulnerability assessment, asset accountability, reporting accuracy, scan coverage, remediation tracking, and enterprise cybersecurity readiness.
• Perform vulnerability scan reviews to confirm data completeness, identify significant findings and anomalies, validate scan status, and support escalation of data-quality or cybersecurity-risk concerns.
• Support development of reports, data calls, metrics, dashboards, and briefing materials by ensuring vulnerability, asset, configuration, and compliance data are accurate, traceable, current, and aligned with authoritative Government sources.
• Coordinate with system owners, administrators, cybersecurity personnel, EVM analysts, and Government stakeholders to obtain missing data, clarify configuration details, reconcile discrepancies, and support timely report submission.
• Maintain complete documentation and records supporting CMRS, Scorecards, configuration management, scan reviews, reporting assumptions, data sources, and quality-control actions.
• Serve as the trained alternate for CLIN 0007, supporting scan-output analysis, anomaly/trend identification, and compliance-incident assessment when required.
• Alternate: CLIN 0007

Position Requirements

Minimum Required Qualification: [These qualifications are mandatory for consideration]

• Prepare, validate, reconcile, and organize data supporting Congressionally Mandated Report Submissions (CMRS), Department of War Scorecards, and other Government-directed vulnerability-management reporting requirements.
• Collect data from Government-provided vulnerability-management repositories, scan outputs, trackers, configuration records, and stakeholder inputs; perform quality checks to identify incomplete, inaccurate, duplicate, untimely, or inconsistent information.
• Manage component-level configuration data used to support vulnerability assessment, asset accountability, reporting accuracy, scan coverage, remediation tracking, and enterprise cybersecurity readiness.
• Perform vulnerability scan reviews to confirm data completeness, identify significant findings and anomalies, validate scan status, and support escalation of data-quality or cybersecurity-risk concerns.
• Support development of reports, data calls, metrics, dashboards, and briefing materials by ensuring vulnerability, asset, configuration, and compliance data are accurate, traceable, current, and aligned with authoritative Government sources.
• Coordinate with system owners, administrators, cybersecurity personnel, EVM analysts, and Government stakeholders to obtain missing data, clarify configuration details, reconcile discrepancies, and support timely report submission.
• Maintain complete documentation and records supporting CMRS, Scorecards, configuration management, scan reviews, reporting assumptions, data sources, and quality-control actions.
• Serve as the trained alternate for CLIN 0007, supporting scan-output analysis, anomaly/trend identification, and compliance-incident assessment when required.

Education and Credentials

• Education: Bachelor’s degree required.
• Certifications: Must possess and maintain at least one current qualifying DoD 8140 certification aligned to the DCWF 541 Vulnerability Assessment Analyst — Intermediate work role. Acceptable certifications include:
  • Certified Ethical Hacker (Practical) — CEH (Practical)
  • CompTIA Cloud+
  • Certified Penetration Testing Engineer — CPTE
  • Federal IT Security Professional – Auditor — FITSP-A
  • GIAC Certified Enterprise Defender — GCED
  • GIAC Certified Incident Handler — GCIH
  • GIAC Cloud Security Automation — GCSA
  • GIAC Global Industrial Cyber Security Professional — GICSP
  • GIAC Security Essentials Certification — GSEC
  • CompTIA PenTest+
  • Red Hat Certified Engineer — RHCE Level 1
  • CompTIA Security+
• Years of Experience: Three (3) to ten (10) years of relevant experience.
• CLINs 0007, 0008, and 0009 are mapped to DCWF Work Role 541, Vulnerability Assessment Analyst, at the Intermediate proficiency level, with a bachelor’s degree, three to ten years of experience, and one qualifying certification required.
• Certification Maintenance: The employee must maintain required certification(s) in good standing and complete at least 20 hours of continuous professional development annually, or the higher amount required to maintain the applicable certification.
• Security and Government Training: Before receiving network access, selected personnel must complete required COMPUSEC, OPSEC, Anti‑Terrorism Level I, Government information‑assurance, security, and role‑specific training.

Optional/Value-added qualifications: [These qualifications are desirable but not required]

Optional/Value-added Experience:

• Experience supporting the U.S. Space Force, U.S. Air Force, Department of Defense, Combatant Commands, CSSPs, or other classified cybersecurity mission environments.
• Experience using Tenable, ACAS, Nessus, SecurityCenter, or comparable enterprise vulnerability-management and vulnerability-scanning tools.
• Experience reviewing vulnerability scans; validating findings; analyzing scan coverage; investigating anomalies; assessing remediation status; or producing vulnerability‑management reports.
• Experience with POA&M development and tracking, corrective‑action management, cybersecurity compliance, security‑control assessment, continuous monitoring, audit remediation, RMF, NIST SP 800‑53, or DISA Security Technical Implementation Guides.
• Experience preparing or supporting CMRS, DoD Scorecards, cybersecurity scorecards, vulnerability‑management metrics, data calls, readiness reports, or executive briefing materials.
• Experience managing asset inventories, component‑level configuration data, configuration‑management records, system baselines, or data‑quality controls for cybersecurity reporting.
• Experience supporting Red Team activities, adversarial assessments, cyber threat emulation, readiness inspections, cybersecurity audits, compliance inspections, or vulnerability remediation initiatives.
• Experience with data analysis and reporting tools, including advanced Microsoft Excel, Power BI, Microsoft Power Platform, SQL, SharePoint, ServiceNow, Jira, or comparable workflow and reporting platforms.

Optional/Value-added Additional Credentials:

• Education: Bachelor’s or master’s degree in cybersecurity, computer science, information systems, information technology, software engineering, data analytics, or another closely related technical discipline.
• Certifications/Training: Additional relevant certifications such as CySA+, CEH, CISSP, SSCP, GSEC, GCIA, GCIH, GCED, CGRC/CAP, CISA, CISM, or relevant Tenable, ACAS, RMF, vulnerability assessment, configuration management, audit, or cybersecurity reporting training.

Experience: More than three years of DoD, Space Force, Air Force, CSSP, enterprise vulnerability‑management, cyber‑defense, cybersecurity compliance, security assessment, or classified mission‑support experience.

Duty Location: Work locations are Schriever Space Force Base, Peterson Space Force Base and Colorado Springs Local Area. Support provided to Geographically Separated Unites (GSUs).

Work Arrangement: Onsite

Travel Requirements: None anticipated

Minimum Security Clearance Required: Current TS with SCI eligibility at start of performance

Full-Time/Part-Time Full-Time

Tags

Pending Contract Award Pending Contract Award

Relocation Assistance

Sign-on Bonus

Travel Required

RFI/RFP

Req Number INF-26-00066

Location ECCOS Mission Delta 6 Enterprise Cybersecurity & Cyberspace Operations Support

This position is currently accepting applications.