Cybersecurity Analyst

Intrepid Solutions and Services LLC; Alexandria (VA); On-site; USD 185,000 - 225,000; Full time

Benefits offered by this job

401(k) with company matching

Dental insurance

Medical insurance

Health Savings Account options

Flexible Spending

Vision insurance

Life and Disability Insurance

Hospital Indemnity and other ancillary

Paid Time Off

Holiday pay

Job summary

Intrepid Solutions and Services LLC is seeking a Cybersecurity Analyst – ISSE to support the US Army TENCAP client in Alexandria, VA. The role requires deep expertise in cybersecurity across the SDLC, risk management, and A&A processes.

The candidate will perform risk assessments, review security documentation, and ensure compliance with DoD and Army cybersecurity requirements. This is a 100% onsite position with limited CONUS travel.

Qualifications

• 20+ years of cybersecurity experience in design, development, integration, test, certification, and accreditation for DOD/IC systems.
• 15+ years applying RMF (ICD 503) for accreditation of DOD/IC IC IT Systems.
• 10+ years supporting DOD acquisition programs / projects, incl. development of system security requirements, post Milestone B/C cyber documentation, and prototype testing.
• Proficiency in Linux: command-line, file systems, networking concepts, scripting, automation, and system administration.
• Knowledge of configuring network components, secure network transport, and CDS deployment.
• Encryption capabilities: PKI, Data at Rest, Data in Transit, FIPS 140-2/3.
• Experience reviewing firewall rules (ports, protocols, services).
• Experience with PDR/CDR/FDR design reviews and vulnerability management tools.

Responsibilities

• Analyze existing and emerging TENCAP IS/IT systems for compliance with Army, DoD, and Federal IA policies.
• Develop and document standards/guides for IA/cybersecurity solutions and assessments.
• Conduct and document risk assessments with mitigations for unclassified/classified systems.
• Provide Cybersecurity-ISSE recommendations and documentation through SDLC, including SSP, SAR reviews, and POA&M evaluations.
• Support acquisition services with Cybersecurity-ISSE guidance.

Skills

Cybersecurity experience

RMF (ICD 503)

DOD acquisition programs

Linux proficiency

CDS deployment

PKI

DAR

DIT

FIPS 140-2/3

Firewall rules review

Design reviews (PDR/CDR/FDR)

Vulnerability tools

Nessus

ACAS

SCAP

Configuration Management

DISA STIGs

DevSecOps

NIST SP800-53

CSRMC

A&A process

Education

Bachelor's degree in CS/CE or related field

Tools

Nessus

ACAS

SCAP

Job description

CIS-Intrepid Solutions has a need for a Cybersecurity Analyst – Information Security System Engineer (ISSE) to support our US Army TENCAP client as they enable the Army to rapidly exploit and influence national capabilities and architectures in Alexandria, VA.

Responsibilities

• Provide analysis of existing and emerging TENCAP Information Systems, and IT Infrastructure to assess compliance with Army, DoD, and Federal IA policies, orders, tasks, or regulations
• Develop and document standards and guides for IA/cybersecurity solutions, including compliance, system security design, and assessments
• Conduct and document Risk Assessments identifying risks, probability of occurrence, resulting impact, and mitigating safeguards for unclassified and classified systems
• Provide Cybersecurity-ISSE recommendations and documentation throughout the system development life cycle, with emphasis on technical aspects.
• Provide Cybersecurity-ISSE recommendations at meetings, briefings, and design reviews.
• Provide Assessment & Authorization expertise.
  • Development and review of System Security Plan (SSP).
  • Review Security Controls, providing updates.
  • Provide review and technical validation of findings in Security Assessment Reports (SAR).
  • POA&M technical evaluation.
• Provide hardware and software assessment regarding Cybersecurity effectiveness in support of:
  • System architecture design or change.
  • Program Change Control Management process.
• Ensure systems remain compliant with Cybersecurity policies.
• Provide Cybersecurity-ISSE guidance supporting acquisition services.

Operating Hours and Expectations

This position anticipates standard work hours, Monday-Friday and will operate 100% onsite.

Travel

Limited CONUS travel expected.

Qualifications

Clearance

• Active TS/SCI clearance required. We are unable to provide sponsorship of initial clearance or upgrade of existing clearance. Candidates without currently active TS/SCI clearances are ineligible for this role.

Education

• Bachelor's degree in computer science, computer engineering, or related field +10 years of work experience OR 15 years of work experience

Certification(s)

• DOD and Army training requirements - DOD 8140.01, Cyberspace Workforce Management; DFARS 252.239.7001, Information Assurance Contractor Training and Certification; AR 25-2, Information Assurance
• Baseline certification as stipulated in DODD 8140.01
• IAM Level III or IAT Level III baseline certification
• IAW DOD 8570.01 certification

Skills and Experience

• 20+ years of progressively complex cybersecurity experience in the design, development, integration, test, certification, and accreditation of security solutions for DOD or IC intelligence systems.
• 15+ years of experience in applying Risk Management Framework (ICD 503) for the accreditation of DOD or IC Information Technology Systems.
• 10+ years of cybersecurity experience supporting DOD acquisition programs / projects, to include:
  • Development of system security requirements
  • Post Milestone "B" and "C" cyber documentation
  • Cybersecurity support for prototype testing.
• Proficiency in LINUX, to include: command-line proficiency; understanding LINUX file systems and networking concepts; scripting & automation; system administration.
• Hardware experience:
  • Knowledge of and experience with configuring network components
  • Knowledge of secure network transport components and configuration
  • Experience in supporting the development, configuration, and deployment (connection approvals) of Cross Domain Solutions (CDS).
• Technology experience:
  • Encryption
    • Public Key Infrastructure (PKI)
    • Data at Rest (DAR)
    • Data in Transit (DIT)
    • FIPS 140-2/3
• Experience reviewing firewall rules with attention to:
  • Ports, Protocols, and Services
  • Source and destination of network traffic.
• Experience in cybersecurity support for Preliminary Design Review (PDR), Critical Design Review (CDR), and Final Design Review (FDR) as part of a design review process.
• Experience with vulnerability assessment, vulnerability management, and compliance tools.
  • Nessus
  • ACAS
  • SCAP
• Experience in Configuration Management process.
• Experience with system hardening with DISA STIGs or other Department/Agencies hardening process.
• Experience in supporting DevSecOps implementation.
• Experience with NIST SP800-53, RMF as defined by NIST 800-37.
• Experience with Cybersecurity Risk Management Construct (CSRMC) is desirable.
• Experience with the Assessment and Authorization (A&A) process to include the steps leading up to authorization and activities post authorization.
• Experience with translating policies and guidance into technical solutions.
• Experience with translating and effectively conveying highly technical topics in a consumable brief or presentation to Leadership.
• Compliance with DOD and Army training requirements in DOD 8140.01, Cyberspace Workforce Management; DFARS 252.239.7001, Information Assurance Contractor Training and Certification; AR 25-2, Information Assurance.
• Subject to investigative and assignment requirements IAW AR 25-2, AR 380-67, Personnel Security Program, and related regulations.

Benefits

WHAT WE OFFER: At CIS Secure and its associated companies, Intrepid Solutions and Services and Darkblade Systems, we believe in promoting fair and transparent pay practices. We are committed to disclosing the compensation range for transparency and to set clear expectations for all applicants for this posting. This range represents the anticipated low and high end of the base salary for the advertised job, promotion, or transfer opportunity. Please note that the pay range provided is a good faith estimate for the position at the time of posting. The actual salary offered may vary based on various factors including but not limited to relevant experience, knowledge, skills and abilities, education, geographic location, as well as internal equity, and alignment to market data.

Job Type: Full-time (onsite)

Pay Range: $185,000.00 - $225,000.00 per year

• 401(k) with company matching
• Dental insurance
• Medical insurance
• Health Savings Account option
• Flexible Spending
• Vision insurance
• Life and Disability Insurance
• Ancillary offerings (Hospital Indemnity, Accident, Critical Illness, Pet Insurance)
• Paid Time Off
• Holiday pay

Intrepid Solutions, a CIS Secure company, is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.