Cybersecurity Defense & Compliance Analyst

SpahrLLC; Fort Belvoir (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

401(k)

Competitive salary

Dental insurance

Health insurance

Paid time off

Training & development

Vision insurance

Job summary

Spahr is seeking a Cybersecurity Protect Analyst to support the DTRA Tier II CSSP team. The role emphasizes hands-on guidance for security posture issues, vulnerability management, and compliance with DoDIN directives in a fast-paced environment.

You will coordinate with data stewards on DED governance, perform ACAS-based assessments, and monitor threat intel to anticipate evolving attack vectors, all while aligning with CSSP standards and auditing requirements.

Qualifications

• Experience as the cybersecurity liaison for subscriber organizations, providing advanced, hands-on guidance.
• Familiarity with CSSP Data Element Dictionary governance and data schema validation.
• Knowledge of vulnerability tracking using KEV, CVSS, CVE identifiers, and NVD resources.
• Experience with endpoint security tooling and malware defense validation.

Responsibilities

• Subscriber Engagement & Liaison: Act as the cybersecurity liaison for subscriber orgs, guiding complex security posture issues.
• Data Element Dictionary Governance: Auditor for the CSSP DED, ensure canonical mappings and schema compliance.
• Vulnerability Tracking & KEV Management: Track KEV catalogs, coordinate remediation with system owners.
• Vulnerability Assessment & Analysis (VAA): Conduct ACAS-based assessments and derive prioritized remediation steps.
• CTI Integration: Monitor threat intelligence feeds and IOC alerts to adjust defensive posture.
• ESM & Compliance Support: Support DoDIN evaluation readiness and evidence gathering.
• Blue Team & Posture Validation: Conduct blue team assessments under Government supervision.
• Endpoint & Malware Defense Validation: Validate endpoint protection and boundary defense configurations.
• Directive Implementation: Track and validate compliance with CPCON shifts and TASKORDs.
• Audit Readiness & Evidence Gathering: Lead evidence gathering for audits and internal reviews.

Job description

Spahr is seeking a Cybersecurity Protect Analyst to support the DTRA Tier II CSSP team. The role emphasizes hands-on guidance for security posture issues, vulnerability management, and compliance with DoDIN directives in a fast-paced environment.

You will coordinate with data stewards on DED governance, perform ACAS-based assessments, and monitor threat intel to anticipate evolving attack vectors, all while aligning with CSSP standards and auditing requirements.