Cybersecurity Analyst- Fort Lee, VA

Sawdey Solution Services; Fort Lee (VA); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Sawdey Solution Services is seeking a Cybersecurity Analyst to support the Blue List Program by evaluating cybersecurity submissions and advising Government personnel on requirements, standards, risk management, and assessment methodologies. The role emphasizes embedded systems, software, firmware, encryption, authentication, and supply-chain security.

The position requires 5+ years of practical cybersecurity experience, a Bachelor’s in a technical field, and Security+ or CISSP certification.

Qualifications

• Bachelor's degree in Cybersecurity, CS, CS Engineering or related field.
• Security+ or CISSP certification required.
• Strong technical analysis and critical-thinking skills.
• Interpret highly technical cybersecurity information and translate findings.
• Strong written and verbal communication abilities.
• Ability to collaborate with Government personnel and stakeholders.
• Proficiency with Microsoft Office applications.

Responsibilities

• Support evaluation of Blue List product submissions as a cybersecurity SME.
• Advise on cybersecurity requirements, standards, risk management, and assessment methodologies.
• Apply cybersecurity principles to embedded systems, software, firmware, and networks.
• Review penetration tests and vulnerability assessments for completeness and sufficiency.
• Identify threats, residual risk, and mitigation strategies; develop technical recommendations.
• Validate vendor remediation plans to ensure adequate mitigation.

Skills

Cybersecurity

Embedded systems

Software

Firmware

Wireless

Networking

Encryption

Authentication

Supply-chain security

Education

Bachelor's degree

Security+ or CISSP

Job description

Position Location:

DCMA Facility, San Diego, CA (On-Site) OR Fort Lee, VA

Telework/Work-from-Home Authorized:

Hybrid

About the Role:

The Cybersecurity Analyst serves as a technical subject matter expert supporting the cybersecurity evaluation of product submissions for the DCMA Blue List Program. The position provides technical expertise and advisory support to Government personnel regarding cybersecurity requirements, technical standards, risk management, assessment methodologies, vulnerabilities, and emerging threats affecting small unmanned systems and related technologies.

The Cybersecurity Analyst will evaluate cybersecurity assessment results and technical evidence, identify vulnerabilities and residual risks, assess proposed remediation strategies, and develop recommendations that support Government technical acceptance and Blue List Program decisions.

Additional Responsibilities Include, but are not Limited To:

• Serve as a cybersecurity technical subject matter expert supporting the evaluation of Blue List product submissions.
• Provide advisory support regarding cybersecurity requirements, technical standards, risk-management practices, and assessment methodologies.
• Apply cybersecurity principles to embedded systems, software, firmware, wireless communications, networking, encryption, authentication, and supply-chain security.
• Interpret cybersecurity assessment methodologies and technical assessment data.
• Review and analyze penetration-testing results, vulnerability assessments, software-assurance evaluations, firmware analyses, and related cybersecurity evidence.
• Evaluate cybersecurity assessment reports and supporting technical documentation for completeness, technical sufficiency, and adequacy.
• Identify cybersecurity vulnerabilities, threats, attack vectors, and residual risks that could affect DoD missions, warfighter safety, national security, operational resilience, or Government information and systems.
• Develop technical recommendations addressing cybersecurity findings, risk-mitigation strategies, assessment requirements, and technical acceptance considerations.
• Review and validate vendor remediation plans to determine whether proposed corrective actions sufficiently mitigate identified cybersecurity vulnerabilities.
• Maintain awareness of applicable Federal statutes, DoD policies, NDAA requirements, cybersecurity frameworks, industry best practices, and Government Blue List processes.
• Provide cybersecurity consultation and advisory support to Government personnel and stakeholders.
• Monitor emerging cybersecurity threats, vulnerabilities, technologies, and policy developments affecting small unmanned systems and associated technologies.
• Provide recommendations supporting the continued improvement and evolution of the Blue List Program.
• Perform other duties, as assigned.

Experience Requirements:

• Practical cybersecurity experience supporting technical systems, cybersecurity assessments, or related technical environments.
• Five (5) or more years of practical experience is preferred.
• Demonstrated knowledge of cybersecurity principles applicable to:
  • Embedded systems
  • Software and firmware
  • Wireless communications and networking
  • Encryption and authentication
  • Supply-chain security
• Experience interpreting penetration-testing results, vulnerability assessments, software-assurance evaluations, firmware analyses, and other technical cybersecurity assessment data.
• Experience identifying vulnerabilities, threats, attack vectors, residual risk, and appropriate mitigation strategies.
• Ability to evaluate technical cybersecurity documentation and communicate findings and recommendations to Government decision-makers.
• Experience with small unmanned systems, UAS technologies, or related embedded technologies is highly desirable.
• Candidates must meet applicable DoDM 8140.03 Department Cyber Workforce Framework (DCWF) qualification requirements at the appropriate proficiency level for work such as:
  • Cyber Defense Analysis - DCWF Work Role 511, and/or
  • Security Control Assessment - DCWF Work Role 612.

Education Requirements:

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline.
• Certification requirements: Security+ or CISSP.

Other Required Skills & Abilities:

Strong technical analysis and critical-thinking skills.

Ability to interpret highly technical cybersecurity information and translate findings into clear recommendations.

Strong written and verbal communication skills.

Ability to work collaboratively with Government personnel, technical experts, assessors, vendors, and other stakeholders.

Ability to maintain awareness of rapidly evolving cybersecurity threats, technologies, standards, and policy.

Proficiency with Microsoft Office applications.

Security Clearance Requirements:

Secret

US Citizenship Requirements:

This position supports a U.S. Government Contract whose terms require Sawdey Solution Services to staff it only with U.S. Citizens.

About the Organization

Sawdey Solution Services, an ISO 9001 certified and CMMI-SVC v2 Level 3 appraised corporation, has built a nationwide and global footprint as a leading government contracting organization. Specializing in cybersecurity, systems engineering, and operational support, Sawdey invites you to be a part of a team that's at the forefront of securing our nation. Operating successfully since 2001, we are a Woman Owned/Service-Disabled Veteran Owned Business. We provide our clients with premier professional services and technology solutions in an employee-centric environment. We are extremely proud of the culture we have created.

Why Choose Us?

• Mission-Critical Work: We play a vital role in ensuring the security of our nation's digital infrastructure.
• Professional Growth: Embrace the opportunity to take on diverse and dynamic roles that challenge and inspire you.
• Collaborative Culture: You are joining a unified team where your unique contributions are valued and celebrated.

Who We're Looking For:

• Hardworking Individuals: If you're someone who takes initiative, loves a challenge, and is committed to excellence, you'll feel right at home here.
• Talented Professionals: Whether you're an expert in your field or a rising star, we recognize your potential and support your effort toward success.
• Diverse Perspectives: Our strength lies in our diversity. We believe that a diverse team fosters creativity, innovation, and achievement.

EOE Statement:

We are a Disabled-Veterans-41 CFR 60 1.4, Equal Opportunity Employer. Devoted to creating a diverse and friendly workplace, we do not discriminate against any employee or applicant because of race, age, sex, color, physical or mental disability, religion, sexual orientation, gender identity, marital status, national origin, or veteran status. Our goals and beliefs are that diverse backgrounds and experiences empower and enable us to offer our customers an unmatched level of service. People of color, women, LGBTQIA+, veterans, and persons with disabilities are encouraged to apply!

Full-Time/Part-Time: Contingent

Pay Rate:

The annual base salary range for this position is TBD. Please note that the salary information is a general guideline only. At Sawdey Solution Services, we recognize that attracting the best talent is key to our strategy and success as a company. We will consider several factors when extending an offer to an applicant. These factors include (but are not limited to) the position, associated responsibilities, work experience, education, related training, and related skills.

This position is currently accepting applications.