Cybersecurity Analyst

Paycom - ATS; Arlington, Northern (VA, KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

TIAG is seeking a Cybersecurity Analyst for a full-time, on-site role in Arlington, VA. The position requires an active Secret Clearance to start and involves monitoring security, performing risk assessments, and supporting RMF/A&A processes.

Responsibilities include incident response, collaboration with IT teams, audits, and maintaining consistent documentation for compliance and reporting. Strong knowledge of NIST, STIGs, and security tools is essential.

Qualifications

• Associate's degree in computer science or related field.
• 2 years of professional experience in information security, risk management, or related field.
• Experience with DoD ACAS tool preferred; familiarity with DoD security policies (NIST, STIG) and RMF/A&A processes.

Responsibilities

• Continuously monitors information systems for security threats, vulnerabilities, and breaches.
• Conducts risk assessments and vulnerability analyses; recommends remediation strategies.
• Use STIG Viewer to assess, document, and track system compliance with STIGs; generate compliance reports.

Skills

RMF Knowledge

A&A Process

Security Incident Response

NIST Standards

Communication Skills

Education

Associate's degree in computer science or related field

Tools

ACAS

STIG Viewer

eMASS

CSAM / XACTA

Firewalls / IDS/IPS

Vulnerability Scanners

AWS (Cloud)

Job description

## DescriptionTIAG is now hiring a Cybersecurity Analyst to join our team full time in Arlington, VA. The position is 100% onsite in Arlington and requires an active Secret Clearance to start work.* **Responsibilities include:*** Continuously monitors information systems for security threats, vulnerabilities, and breaches. Utilize security tools to analyze alerts and take appropriate action.* Conducts regular risk assessments and vulnerability analyses to identify potential security weaknesses and recommends remediation strategies.* Utilize DISA STIG Viewer to assess, document, and track system compliance with Security Technical Implementation Guides (STIGs), including performing checklist reviews, recording findings, and generating compliance reports.* Supports the Assessment and Authorization (A&A) process as part of the Risk Management Framework (RMF) for multifaceted systems, networks and enclaves.* Assists with risk mitigation through management of the Plan of Action and Milestones (POA&M) process. Verifies actions taken by internal IT support teams satisfy risk mitigation.* Assists in the development and implementation of information assurance policies and procedures to ensure compliance with organizational and regulatory requirements.* Support incident response efforts, including investigating security incidents, documenting findings, and coordinating with relevant teams for remediation.* Maintains accurate documentation of security incidents, assessments, and compliance activities for audit and reporting purposes.* Participates in internal and external audits to assess compliance with security policies and regulatory requirements; provide recommendations for improvement.* Works closely with IT staff and other departments to ensure that security measures are integrated into system development and operational processes.## Qualifications* Associate's degree in computer science or related field* 2 years of professional experience in information security, risk management, or a related field, including internships or coursework.Technical Skills:* Basic knowledge of security tools, network security principles, and vulnerability assessment methodologies.* Working experience with the DoD's Assured Compliance Assessment Solution (ACAS) tool is preferred:* Basic knowledge of U.S. Government security policy including Department of Defense and appropriate civil agencies such as NIST, as well as commercial \"best practices\".* Working knowledge of standard information security products including firewalls, intrusion detection systems, anti-virus systems, vulnerability testing, and security analysis tools.* Familiarity with STIG Viewer* Exposure to the Risk Management Framework (RMF) and the A&A process.* Exposure to a Governance, Risk and Compliance (GRC) tool such as eMASS (preferred), CSAM or XACTA.* Exposure to cloud computing implementation and maintenance preferably with AWS.* Strong analytical and problem-solving skills, with the ability to assess complex security issues and propose solutions.* Excellent verbal and written communication skills; ability to explain technical concepts to non-technical stakeholders.* Ability to work effectively both independently and as part of a team in a fast-paced environment.* Active Secret Clearance or current interim* IAT Level I certification* CompTIA A+, Network+, CCNA (Security+ satisfies the requirement)* Computing environment certification (e.g., Server+, Linux+, AWS Certified Solution Architect (or equivalent))TIAG is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60-1.4(a), 41 CFR 60-300.5(a), and 41 CFR 60-741.5(a) and employment decisions shall be based solely on merit and without regard disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. TIAG takes proactive steps to employ and advance in employment qualified individuals without regard to disability or protected veteran status. The parties also agree that, as applicable, they will abide by the requirements and may be subject and required to take action pursuant to the following laws and accompanying regulations:The Vietnam Era Veterans Readjustment Assistance Act of 1974, as amended (and its implementing regulations at 41 C.F.R. 60-300);Section 503 of the Rehabilitation Act of 1973, as amended (and its implementing regulations at 41 C.F.R 60-741); andExecutive Order 13496 (and its implementing regulations at 29 C.F.R. part 471, Appendix A to Subpart A).