Cybersecurity Analyst

Ellumen, Inc.; Silver Spring (MD); On-site; USD 85,000 - 125,000; Full time

Job summary

Ellumen, Inc. is seeking a Cybersecurity Analyst to support RMF activities for DHA systems and applications. The role collaborates with ISSMs and stakeholders to ensure secure operation across DHA environments and devices.

Responsibilities include maintaining cybersecurity repositories, coordinating inspections and continuous monitoring, and providing RMF guidance on CMRS tagging and POA&Ms. A Secret clearance and IAM Level I (Security+ CE) are required.

Qualifications

• Minimum RMF experience; prefer 5+ years.
• DHA experience preferred 5+ years.
• Secret clearance required; DoD 8570 IAM Level I with Security+ CE or equivalent.

Responsibilities

• Develop and maintain DHA organizational or system-level cybersecurity program related to architecture, requirements, objectives, policies, personnel, processes and procedures.
• Maintain repositories for all organizational cybersecurity related documentation (e.g., eMASS).
• Coordinate cybersecurity inspections, tests, reviews, and continuous monitoring activities with affected parties.
• Provide technical advisory support to assigned sites and ISSMs.
• Provide input on input on requirements to stakeholders.
• Review and provide input on POA&Ms.
• Provide guidance on CCI metrics, policies and procedures.
• Monitor compliance with organizational cybersecurity policy and report incidents.

Skills

RMF Process

DHA Experience

Security+ CE

IAM Level I

Education

Bachelor's Degree

Job description

Cybersecurity Analyst

The Cybersecurity Analyst will provide support for all RMF activities of assigned DHA systems/applications. This includes support for assigned sites and interactions with stakeholders in direct support of the Information System Security Manager (ISSM) as a liaison to ensure the secure operation and maintenance of DHA environments. The analyst will utilize a variety of security techniques, technologies, and tools to review and evaluate security solutions for assigned DHA systems/applications, which may include LANs, WANs, workstations, network devices, and end user devices (EUDs). They will participate in all phases of the continuous monitoring and accreditation processes as directed.

Responsibilities Include:

• Develop and maintain DHA organizational or system-level cybersecurity program related to cybersecurity architecture, requirements, objectives, policies, personnel, processes and procedures
• Maintain repositories for all organizational cybersecurity related documentation (e.g., eMASS)
• Ensure that all cybersecurity inspections, tests, reviews, and continuous monitoring activities are coordinated with affected parties and organizations
• Provide technical advisory support to assigned sites and applicable ISSMs
• Provide technical review requirements to stakeholders
• Review and provide input on POA&Ms
• Provide input and guidance on CCI metrics, including the development of policies and procedures
• Monitor compliance with established organizational cybersecurity policy, and report incidents to the appropriate reporting chains

• Provide guidance on CMRS tagging, TASKORD, and IAVM requirements.
• Provide cyber security, RMF, certification and accreditation, risk assessments, analysis, solutions, and recommendations for Government leadership.
• Please note that the duties listed above are not exhaustive, and the successful candidate may be required to perform additional tasks as needed.

Requirements:

• RMF Process (prefer at least 5 years or relevant equivalent)
• DHA Experience (prefer at least 5 years or relevant equivalent)
• Secret Clearance (Required)
• Bachelor's Degree (or equivalent)
• Must meet 8570 requirements for an IAM Level I with a Security+ CE minimum certification or equivalent as noted on https://public.cyber.mil/wid/cwmp/dod-approved-8570-baseline-certifications/