Cybersecurity Tools Analyst

Sentar; Charleston (SC); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid time off

Tuition reimbursement

Professional development

Job summary

Sentar is seeking a Cybersecurity Tools Analyst in Charleston, SC, hybrid. You will support the Marketplace Cyber Support team under RMED, addressing compliance, sustainment, and protection needs for information systems including medical equipment and applications.

You will analyze security outputs, use agency tools, and translate findings into actionable configuration and compliance work, coordinating with system POCs and reviewing architecture and inventories.

Qualifications

• DoD 8570 IAT Level II certification required or equivalent
• Technical degree plus 6 years of technical experience, or 10 years without degree
• Experience with ACAS/Nessus and HBSS/ESS preferred
• Familiarity with MECM, IP subnets, Splunk, eMASS/CMRS/Phoenix

Responsibilities

• Analyze security outputs and translate findings into configuration and compliance work
• Review vulnerability scans and implement changes per requirements
• Interpret HBSS/ESS outputs and MECM to decide actions
• Use eMASS/CMRS/Phoenix to troubleshoot gaps
• Cross-check results across tools (ACAS, ESS, MECM, CMRS, Phoenix, Splunk, eMASS)
• Coordinate with system POCs and review architecture diagrams and inventories
• Explain compliance requirements and assist toward outcomes, provide tool training
• Apply NIST SP 800-53 controls, DISA STIGs, and SRGs
• Support SOP creation and maintenance for Cyber Support Tool SMEs

Skills

IP subnetting

Vulnerability analysis

Compliance awareness

Education

IAT Level II certification (e.g., CCNA Security, Security+ CE)

Technical Bachelor's degree

Tools

ACAS

Nessus

HBSS

ESS

MECM

eMASS

CMRS

Phoenix

Splunk

NIST SP 800-53

DISA STIGs

SRGs

Armis

CrowdStrike

Job description

Sentar’s Cybersecurity Tools Analyst role (Charleston, SC, hybrid) supports the Marketplace Cyber Support team within RMED, backed by the Defense Health Agency (DHA). You will help cybersecurity staff across the DHA enterprise network by addressing compliance, sustainment, and protection needs for information systems, including specialized medical equipment and applications. This position also includes a strong culture of employee ownership, where initiative and continuous improvement are encouraged.

Responsibilities

In this role, you will analyze security outputs and use agency tools to translate findings into actionable configuration and compliance work.

• Review and interpret information system vulnerability scan results using agency assessment tools (for example, ACAS/Nessus), and implement configuration changes aligned to organizational requirements.
• Analyze Host-Based Security System (HBSS) and/or Endpoint Security Solution (ESS) outputs and configurations to identify what actions are needed.
• Interpret MECM outputs and determine necessary next steps.
• Apply basic IP sub-netting concepts to support security and network understanding.
• Use compliance and authorization reporting environments such as eMASS, CMRS, and Phoenix to troubleshoot and resolve gaps related to coverage, versioning, documentation, and execution.
• Cross-check results across tools and reporting systems (ACAS, ESS, MECM, CMRS, Phoenix, Splunk, and eMASS) to identify inconsistencies or shortfalls within the context of the Med-COI Zone Architecture.
• Coordinate with system POCs and review authorization boundary diagrams, architecture diagrams, hardware/software inventories, IP address assignments, Med-COI Zone taxonomy, and related artifacts.
• Partner with system POCs on tool configuration and outputs, explaining compliance requirements, assisting toward compliance outcomes, and providing training on tool use.
• Apply NIST, DoD, and DHA security requirements, including NIST SP 800-53 controls, DISA Security Technical Implementation Guides (STIGs), and Security Requirements Guides (SRGs).
• Support the creation and ongoing maintenance of SOPs used by the Cyber Support Tool SMEs.

Requirements

• Clearance Level: Secret
• Education and Experience: Technical Bachelors degree with 6 years of technical experience, or 10 years of technical experience without a degree.
• DoD 8570: IAT Level II certification (examples include CCNA Security, Security+ CE, CISSP, etc.).
• Demonstrated experience with ACAS.
• Demonstrated experience with HBSS/ESS.
• Demonstrated experience with MECM.
• Demonstrated experience with IP subnets.
• Demonstrated experience with Splunk.
• Familiarity with CMRS (familiarity with Phoenix is a plus).
• Familiarity with NIST SP 800-53, DISA STIGs, and SRGs.
• Familiarity with eMASS or similar RMF tool(s).
• Familiarity with Armis or similar tools.
• Familiarity with CrowdStrike is a plus.

Tools and Technologies

• ACAS, Nessus
• HBSS, ESS
• MECM
• eMASS, CMRS, Phoenix
• Splunk
• NIST SP 800-53
• DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs)
• Med-COI Zone Architecture
• Armis, CrowdStrike

Benefits

• Voluntary Medical, Dental, Vision with Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term, and Long-Term Disability provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury, and military duty
• Tuition reimbursement
• Professional development reimbursement
• Recognition and Awards programs

Benefits at Sentar

Sentar’s employee ownership model helps attract top talent and gives employees the freedom to take initiative and drive meaningful improvements. Sentar also supports a thriving and inclusive work environment through an extensive benefits package designed to support employee and family well-being. Employee ownership is the foundation of the culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.