Cybersecurity Systems Analyst - Senior

Amentum; Arlington (VA); On-site; USD 100,000 - 104,000; Full time

Job summary

An established industry player seeks a Cybersecurity Systems Analyst to enhance its cybersecurity posture. This role involves coordinating risk management processes, conducting comprehensive assessments, and ensuring compliance with security standards. You will work closely with network and system administrators, providing expertise in cybersecurity tools and strategies. The ideal candidate will possess a strong background in network defense and risk mitigation, along with excellent communication skills. Join a team dedicated to safeguarding critical systems while enjoying competitive benefits and a supportive work environment.

Benefits

Health and welfare benefits

401k

Stock options

Vacation

Holidays

Bonuses

Qualifications

• 8+ years of experience in cybersecurity and system administration.
• Current DoD 8570.01-M IAT-Level III or IAM-Level III certification.

Responsibilities

• Perform risk and vulnerability assessments, and prepare related reports.
• Develop and maintain security plans, coordinating with various agencies.
• Track A&A status and ensure compliance with security standards.

Skills

Risk Management Framework (RMF)

NIST 800-53 Compliance

Vulnerability Assessments

Network Defense

System Security Assessments

Communication Skills

Education

BA/BS degree

Tools

ACAS

Nessus

Security Content Automation Protocol

Xacta

eMASS

Job description

Job Description: Cybersecurity Systems Analyst

The Cybersecurity Systems Analyst performs assessment and authorization coordination, advising and assisting customers with Risk Management Framework (RMF) processes and developing Plans of Action and Milestones for resolving network deficiencies in accordance with DODI 8510.01 and ICD 503. The role includes assessing network compliance against controls listed in NIST 800-53, creating A&A packages, and supporting the cybersecurity program at USSOCOM and its associated commands and forces.

The analyst executes comprehensive assessments, compliance validations, and vulnerability evaluations using tools such as ACAS, Nessus, and Security Content Automation Protocol. They liaise with network and system administrators to address deficiencies, review scans for new systems, and ensure compliance with DISA Security Technical Implementation Guides (STIG).

Key responsibilities include tracking A&A status, providing SME expertise on RMF, maintaining documentation, developing and reviewing A&A packages, performing risk assessments, and supporting cybersecurity compliance efforts. The role also involves developing and maintaining security plans, coordinating with various agencies, validating patching and security measures, and providing reports on cybersecurity posture.

The candidate should have knowledge of cybersecurity tools like endpoint security, SIEM, and compliance tools, along with experience in network defense, risk mitigation, and system security assessments.

Typical duties include:

• Tracking A&A status of SIE-governed ISs and ensuring documentation is available in automated tools.
• Providing cybersecurity requirements and SME expertise for RMF programs.
• Maintaining connection approval packages and supporting documentation for networks, cloud environments, and systems.
• Developing and reviewing A&A for various systems to obtain necessary authorizations.
• Performing risk and vulnerability assessments, and preparing related reports.
• Enforcing A&A and connection standards, tracking compliance, and ensuring timely notifications.
• Developing and maintaining ISCM plans and supporting ongoing security monitoring.
• Identifying, assessing, and advising on cybersecurity controls and risks.
• Coordinating with agencies to resolve security issues and support authorization processes.
• Performing security assessments, validating patches, and developing POA&Ms.
• Providing expertise for cybersecurity mitigation strategies and implementing security measures.
• Analyzing cybersecurity posture and reporting to stakeholders.

Additional Information:

• Health and welfare benefits, 401k, stock options, vacation, holidays, and bonuses are provided.

• The salary range is $100k to $104k, determined by location, skills, and experience.

Knowledge, Skills, and Abilities:

• Experience with USCENTCOM/USSOCOM is preferred.
• Background in system administration, architecture, and engineering.
• Networking, identity management, and OS expertise.
• Knowledge of RMF, Xacta, eMASS, and DoD IA policies.
• Excellent communication skills and active TS/SCI clearance.

Experience, Education, & Certification Requirements:

• 8+ years of experience.
• BA/BS degree.
• Current DoD 8570.01-M IAT-Level III or IAM-Level III certification (e.g., CISSP, CASP+CE, CISA, CISM, etc.).