Hybrid Cybersecurity Tools Analyst (DoD RMF)

Sentar Inc.; Charleston (SC); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Voluntary Medical, Dental, Vision

401(k) match

Tuition reimbursement

Professional development reimbursement

Generous PTO

Job summary

Sentar, an employee-owned company, seeks a Cybersecurity Tools Analyst in Charleston, SC for a hybrid role supporting the DHA RMED marketplace. The analyst will analyze vulnerability scans (ACAS/Nessus), HBSS/ESS outputs, MECM data, and IP subnets to ensure compliance and improve security posture.

You will work with a suite of tools (ACAS, Splunk, eMASS, CMRS, Phoenix) and adhere to NIST SP 800-53, DISA STIGs, and SRGs, coordinating with system POCs and producing SOPs.

Qualifications

• Secret clearance required.
• Technical Bachelor’s degree or 10+ years experience in lieu of degree.
• DoD 8570 compliance to IAT Level II certification (e.g., CCNA Security, Security+ CE, CISSP).

Responsibilities

• Analyze and comprehend ACAS/Nessus vulnerability scan results; implement configuration changes.
• Analyze HBSS/ESS outputs and configurations.
• Analyze MECM outputs and identify actions.
• Understand basic IP sub-netting and apply findings.
• Utilize eMASS, CMRS, Phoenix for compliance gaps.
• Correlate outputs across ACAS, ESS, MECM, CMRS, Phoenix, Splunk, eMASS.
• Coordinate with system POCs and review diagrams and inventories.
• Explain compliance requirements and provide tool-use training.
• Follow NIST SP 800-53 controls, DISA STIGs and SRGs.
• Assist in creation and maintenance of SOPs.

Skills

ACAS

HBSS/ESS

MECM

IP subnets

Splunk

CMRS

Phoenix

NIST SP 800-53 controls

DISA STIGS

eMASS

Armis

CrowdStrike

Education

Technical Bachelor’s degree

10 years of technical experience without a degree

Tools

ACAS

HBSS

MECM

Splunk

CMRS

Phoenix

eMASS

Armis

CrowdStrike

Job description

Sentar, an employee-owned company, seeks a Cybersecurity Tools Analyst in Charleston, SC for a hybrid role supporting the DHA RMED marketplace. The analyst will analyze vulnerability scans (ACAS/Nessus), HBSS/ESS outputs, MECM data, and IP subnets to ensure compliance and improve security posture.

You will work with a suite of tools (ACAS, Splunk, eMASS, CMRS, Phoenix) and adhere to NIST SP 800-53, DISA STIGs, and SRGs, coordinating with system POCs and producing SOPs.