Cybersecurity Analyst – Security Standards, Baselines

Jobtailor; Arlington (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Jobtailor is seeking a seasoned cybersecurity professional to support the Security Standards & Baselines within the Technology, Innovation, and Engineering Office. You will identify solutions to automate workflows while promoting security awareness across management and align goals with security principles.

Responsibilities include analyzing threat vectors, mentoring teammates, and drafting bulletins and baselines aligned with DISA STIGs, CIS Benchmarks, and vendor guidance.

Qualifications

• Bachelor's degree and minimum 5 years of relevant experience; HS and an additional 4 years may be considered in lieu of bachelor's degree.
• Must possess, or obtain prior to start date, at least one of the following certifications: CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+, PPDA, Agile IC, SNOW App Dev.
• Experience across multiple cybersecurity domains including FISMA, NIST SP 800-53 Rev.5, CIS Benchmarks, DISA STIGs.
• Experience developing and executing research plans.
• Experience working with Windows Server in an enterprise environment.
• Experience managing Active Directory in a multi-domain environment.
• Experience with enterprise application or server virtualization.
• Demonstrated customer service excellence and strong business acumen.
• U.S. citizenship required.
• Active Secret security clearance and ability to obtain Top Secret clearance.

Responsibilities

• Support the Security Standards & Baselines (SSB) in the Technology, Innovation, and Engineering Office.
• Identify and implement solutions to enhance, streamline, and automate workflows.
• Promote awareness of security issues among management and ensure sound security principles in organizational goals.
• Communicate complex security concepts to technical and non-technical stakeholders, including senior leadership.
• Perform extensive research, analysis, and documentation of security threat vectors.
• Provide coaching, mentorship, and knowledge sharing to team members.
• Develop bulletins, alerts, advisories, and security configuration baseline documents aligned with policy and industry best practices.
• Ensure rigorous application of information security and information assurance policies and practices.
• Evaluate technologies to develop recommended security baselines using DISA STIGs, CIS Benchmarks, and vendor guidance.

Skills

Cybersecurity

Security Configuration Baselines

Research and Analysis

Workflow Automation

Enterprise Application Security

Windows Server Management

Server Virtualization

Security Threat Vector Analysis

Information Security Policies

Information Assurance Practices

Education

Bachelor's degree in a relevant field

High School diploma with 4 years of additional experience

Tools

DISA STIGs

CIS Benchmarks

Agile IC

SNOW App Dev

Job description

Responsibilities

• Support the Security Standards & Baselines (SSB) section within the Technology, Innovation, and Engineering (TIE) Office.
• Identify and implement solutions to enhance, streamline, and automate workflows.
• Promote awareness of security issues among management and ensure that sound security principles are reflected in organizational goals.
• Communicate complex security concepts to both technical and non-technical stakeholders, including senior leadership.
• Perform extensive research, analysis, and documentation of security threat vectors.
• Provide coaching, mentorship, and knowledge sharing to team members.
• Develop bulletins, alerts, advisories, and security configuration baseline documents aligned with Departmental policy and industry best practices.
• Ensure rigorous application of information security and information assurance policies and practices.
• Evaluate existing, emerging, and modified technologies to develop recommended security configuration baselines using trusted sources such as DISA STIGs, CIS Benchmarks, and vendor security guidance.

Requirements

• Bachelor's degree and a minimum of 5 years of relevant experience; HS and an additional 4 years may be considered in lieu of bachelor's degree.
• Must possess, or obtain prior to start date, at least one of the following certifications: CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+, PPDA, Agile IC, SNOW App Dev.
• Experience and expertise across multiple cybersecurity domains, including FISMA compliance, NIST SP 800‑53 Revision 5 security controls, enterprise application security configuration, CIS Benchmarks, and DISA STIGs.
• Experience developing and executing research plans.
• Experience working with Windows Server in an enterprise environment.
• Experience managing Active Directory in a multi-domain environment.
• Experience with enterprise application or server virtualization.
• Demonstrated customer service excellence and strong business acumen.
• U.S. citizenship required.
• Active Secret security clearance.
• The ability to obtain a final Top Secret security clearance.

Core Competencies

Demonstrates expertise in cybersecurity practices, including FISMA compliance and NIST SP 800-53 security controls, while effectively communicating complex security concepts to diverse stakeholders. Proven ability to mentor team members and develop security documentation aligned with industry best practices.

Highest-signal resume keywords

• CISSP
• FISMA Compliance
• NIST SP 800-53 Security Controls
• Active Directory Management
• Security Documentation Development

Hard Skills

• Cybersecurity
• Security Configuration Baselines
• Research and Analysis
• Workflow Automation
• Enterprise Application Security
• Windows Server Management
• Server Virtualization
• Security Threat Vector Analysis
• Information Security Policies
• Information Assurance Practices

Soft Skills

• Communication
• Mentorship
• Customer Service Excellence
• Business Acumen

Certifications & Qualifications

• CISSP-ISSAP
• CISSP-ISSEP
• Security+ CE
• CySA+
• PPDA

Industry Keywords

• Security Standards & Baselines
• Technology Innovation Engineering
• Organizational Security Goals
• Security Awareness
• Multi-Domain Environment

Tools & Technologies

• DISA STIGs
• CIS Benchmarks
• Agile IC
• SNOW App Dev