Intermediate Cybersecurity Analyst

NOVA DINE LLC; Quantico (VA); Vor Ort; USD 115.000 - 146.000; Vollzeit

Benefits dieser Stelle

Medical, dental, vision, life and disa

Retirement savings with company match

Paid time off

Tuition reimbursement

Zusammenfassung

Diné Development Corporation (DDC) is seeking an intermediate-level cybersecurity professional to support AFOSI. You will assist with RMF A&A packages, security control implementation, vulnerability management, and security reporting, coordinating with DoD requirements across IT, operations, and development teams.

Candidate will have 5 years in cybersecurity and information assurance, at least 3 years in systems administration, and possess a DoD 8570/8140 IAT Level II certification or the

Qualifikationen

• 5 years of cybersecurity and information assurance experience, including at least 3 years of systems administration.
• Associate's or bachelor’s degree in cybersecurity, information technology, computer science, or a related field preferred; equivalent technical training and relevant experience considered.

Aufgaben

• Design and manage vulnerability scanning architecture and SIEM integration.
• Coordinate RMF Assessment and Authorization packages and security documentation.
• Implement and monitor security controls; document findings and track remediation via POA&M.
• Support vulnerability scanning, asset-list maintenance, patching, and configuration issues.
• Correlate vulnerability results with IAVM alerts and CVEs for compliance tracking.
• Review system configurations against DISA STIGs and guidance.
• Maintain Governance, Risk and Compliance records and eMASS artifacts.
• Assist with security-log review and reporting using SIEMs and PowerShell data collection.

Kenntnisse

RMF knowledge

STIGs

Vulnerability management

POA&M tracking

Event-log review

Firewalls

Security risk assessments

Active Directory

PowerShell

GRC applications

eMASS

Splunk

ArcSight

Ausbildung

Associate's degree in cybersecurity

Bachelor's degree in IT/CS

Tools

ACAS/Tenable

HBSS

Splunk

ArcSight

Jobbeschreibung

Position Overview

Provides intermediate-level cybersecurity and information assurance support for the US Air Force Office of Special Investigations (AFOSI). Under the direction of experienced cybersecurity personnel, assists with Risk Management Framework (RMF) Assessment and Authorization packages, security control implementation and monitoring, vulnerability management, compliance documentation, and security reporting. Supports AFOSI cybersecurity operations by helping maintain system security documentation and by coordinating with infrastructure, operations, and development teams to address Department of Defense security requirements.

Responsibilities

• Provide technical engineering and implementation of security solutions. This includes designing and managing vulnerability scanning architecture, engineering the Security Information and Event Management (SIEM) solution, integrating security testing into the development pipeline, defining secure configuration baselines, and developing technical documentation for security architecture.
• Assist with building, coordinating, maintaining, and updating RMF Assessment and Authorization packages and supporting security documentation for AFOSI systems and enclaves.
• Assist with implementing and monitoring security controls, documenting findings, and tracking remediation activities through the Plan of Action and Milestones process.
• Support vulnerability scanning, report review, asset-list maintenance, scan scheduling, and identification of configuration issues and missing patches using ACAS or comparable tools.
• Help correlate vulnerability results with IAVM alerts, bulletins, and Common Vulnerabilities and Exposures to support compliance tracking.
• Support reviews of system and application configurations against applicable DISA Security Technical Implementation Guides and Security Requirements Guidance.
• Assist with maintaining Governance, Risk and Compliance records and eMASS artifacts, including policies, plans, procedures, reports, and authorization documentation.
• Assist with security-log review and reporting using SIEM tools such as Splunk or ArcSight and use basic PowerShell scripts to collect and organize security data.
• Collaborate with cybersecurity, infrastructure, operations, and development personnel; communicate findings clearly; and support readiness assessments and incident-response activities as assigned.

Years of Experience

5 years of experience in cybersecurity and information assurance, including at least 3 years of systems administration experience supporting servers and infrastructure.

Education Level

Associate's or bachelor's degree in cybersecurity, information technology, computer science, or a related field preferred; equivalent technical training and relevant experience considered.

Clearance Requirements

Must have an active Top Secret clearance and be SCI eligible.

Certification Requirements

Must possess an approved DoD 8570/8140 IAT Level II certificatio n or be able to obtain the required certification within the timeframe permitted by the contract.

Additional Qualifications

Foundational knowledge of RMF, STIGs, security controls, vulnerability management, POA&M tracking, event-log review, firewalls, and security risk assessments. Familiarity with eMASS, GRC applications, ACAS/Tenable, HBSS, Splunk, ArcSight, Active Directory, PowerShell, and asset-management tools is preferred rather than required. Must demonstrate attention to detail, analytical problem-solving skills, effective oral and written communication, the ability to learn DoD cybersecurity processes and tools, and U.S. citizenship

Salary Range

$115,000 to $146,000. The compensation range listed for this position represents the good faith salary range Diné Development Corporation (DDC) and its subsidiaries reasonably expect to pay for the role, in accordance with applicable state and local pay transparency laws. Actual compensation will be determined based on a variety of factors, including the position's responsibilities, the candidate's education, experience, skills, internal equity, market considerations, and any applicable collective bargaining agreements or legal requirements.

About Us

Diné Development Corporation (DDC) is a Navajo Nation-owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.

Benefits

Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.

Equal Opportunity & Compliance Statement

This contractor and subcontractor shall abide b