Cybersecurity Analyst

Jt4, Llc; Salt Lake City, Northern (UT, KY); Hybrid; USD 90,000 - 140,000; Full time

Job summary

JT4, LLC seeks a cybersecurity analyst to monitor IT infrastructure, develop SSPs and POA&Ms, and support RMF processes for DoD programs in Utah. The role involves ATO coordination, risk assessment, and incident response in a fast-paced team environment.

You will work with ISSOs, program managers, and external contractors to ensure security controls are properly implemented, maintained, and documented across system lifecycles.

Qualifications

• Experience with RMF/ ATO processes.
• Ability to develop System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms).
• Strong written and verbal communication skills.
• Familiarity with ACAS, Tenable SecurityCenter, and vulnerability management.

Responsibilities

• Interface with AO/SCA for ATO coordination.
• Manage ATO packages and risk assessments.
• Develop and maintain SSPs, SARs, POA&Ms.
• Conduct vulnerability assessments and incident response.
• Support RMF processes across development, sustainment, or operations.

Skills

ACAS

TEMPEST

Mentoring ISSOs

Excel data analysis

SOPs

Continuous monitoring

Incident response

RMF/POA&Ms

Education

Bachelor's degree in Computer/Info Tech

Security+ certification

DoD 8570.01-M IAT III

Tools

Nessus

eMASS

SCAP

RMF

Job description

Utah - Salt Lake City / Ogden / Hill AFB

Job Description

JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force, Space Force, and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. JT4 develops and maintains realistic, integrated test and training environments and prepare our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges.

JOB DUTIES - ESSENTIAL FUNCTIONS

A Cybersecurity Analyst performs a variety of cybersecurity tasks in monitoring information systems and securing the Information Technology (IT) infrastructure operational environment to include developing and updating system security plans (SSPs), developing plans of action and milestones (POA&Ms), managing and controlling changes to the systems, conducting audits, providing incident response, vulnerability assessments, and assessing the security impact of security and non-security-relevant changes. Work is at an intermediate level, involving managing deadlines, and cybersecurity engineering support for members of development, sustainment, or operations and maintenance team.

Employee will be responsible for the following functions/duties:

• Interface with the Authorizing Official (AO) and the Security Control Assessor (SCA) for coordination of Authorization to Operate (ATO) packages
• Manage multiple system packages throughout the ATO process
• Conduct research and reference reading in obtaining technical information
• Keep informed of currently approved standards, codes, and procedures applied to cybersecurity specialty
• Perform systems engineering activities in the areas of Cybersecurity/Information Assurance (IA)/System Security Engineering (SSE) and security assessment and authorization (A&A) in accordance with NIST SP 800-53 Risk management Framework (RMF)
• Apply risk management concepts to mitigate vulnerabilities in system security architectures
• Interface with the Information System Security Manager (ISSM), program managers, system stakeholders, and external contractors to coordinate cybersecurity requirements and architecture flow down from the system level to individual elements of the system
• Assist in preparation of reports, correspondence, or technical studies
• Perform other job-related duties, as required.

DESIRED QUALIFICATIONS

• Experience utilizing theAssured Compliance Assessment Solution (ACAS)(Tenable SecurityCenter/Nessus) to conduct vulnerability assessments, analyze scan findings, and generate actionable compliance reports.
• Experience administering aunit-level TEMPEST program, ensuring local compliance with DoD and national TEMPEST standards.
• Experience directing and mentoring Information System Security Officers (ISSOs) and cybersecurity specialists in daily compliance, assessment, and authorization activities.
• Safety Trained Supervisor (STS) Certification.
• Advanced Microsoft Excel skills with proven experience manipulating large technical datasets, trackingPOA&Ms/vulnerability metrics, and designing interactive executive dashboards.
• Experience establishing standard operating procedures (SOPs), system interconnection agreements (ISA/MOU), and continuous monitoring strategies.
• Experience coordinating continuous monitoring, incident handling, forensic triage, and audit log analysis across diverse IT/cloud environments.
• Experience developing and maintainingSystem Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms).

REQUIREMENTS - EDUCATION, TECHNICAL, AND WORK EXPERIENCE

A bachelor's degree (master's degree preferred) in Computer / Information Technology / Information Assurance DoD 8570.01-M, IAT Level III compliance; a Security+ certification; and other industry standard certificates such as CASP+CE, CCNP Security, CISA, CISSP, GCED, or GCIH. CEH, CCNA, and CySA+ are required for this position. Must possess seven (7) years of experience in technology or related area.

Additional desired qualifications include Certified Ethical Hacker (Master) or Certified Enterprise Risk Professional (CEH/ CERP).

In addition, a Cybersecurity Analyst must possess the following qualifications:

• Conceptual knowledge of RMFprocess, eMASS, ACAS, SCAP, STIG, Cyber Risk Assessments (CRA), Cyber Table Top (CTT) or related process
• Robust conceptual and practical understanding of IT infrastructure designs, technologies, products, and services
• Experience supporting various system configurations such as standalone, local area networks (LANs), and wide area networks (WANs)
• Experience formulating and/or interpreting cyber threat analysis of adversary techniques, tactics, and procedures used to disrupt computer networks
• Excellent written and verbal communication skills, analytical ability, judgment, and the ability to work effectively with the customer and Cybersecurity Engineering Support Team
• Ability to plan, organize, and work under strict deadlines.
• Experience with planning, designing, executing, and assessing discussion-based exercises.

OTHER RESPONSIBILITIES

Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job.

WORKING CONDITIONS

Work is performed in a typical office environment with no unusual hazards. Occasional lifting (up to 20 pounds), constant sitting and use of a computer terminal; constant use of sight abilities while writing, reviewing, and editing documents, constant use of speech/hearing abilities for communication; and constant mental alertness are required.

Routine travel to remote company work locations and work in field environment with occasional overnight assignment may be required

DISLCAIMER

The above statements are intended to describe the general nature and level of work being performed by personnel assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of persons so classified.

Tasking is in support of a federal government contract that requires U.S. citizenship. This job requires a candidate to be eligible for a government security clearance, state-issued driver's license or other licenses/certifications and the inability to obtain and maintain the required clearance, license or certification will affect an employee's ability to maintain employment.

SCC: JCIS11; A3UTTR

JT4 is an equal opportunity employer and does not discriminate on the basis of race, color, religion, creed, gender, age disability, sex (including pregnancy, childbirth, and related medical conditions), national origin, military status, veteran status, genetic information, or any other characteristic protected under applicable federal, state or local law. The Company provides reasonable accommodations/modifications to disabled individuals to assist in the hiring process and to qualified individuals with disabilities in the performance of essential job functions, in accordance with federal, state and local law.