Senior Cybersecurity Analyst

Technomics, Inc.; Arlington (VA); On-site; USD 100,000 - 130,000; Full time

Job summary

A decision analytics firm is seeking a Senior Analyst in Arlington, VA, to provide cybersecurity expertise and lead Risk Management Framework processes. The ideal candidate will have a Bachelor's degree in Cybersecurity Management and at least 10 years of direct experience in cybersecurity. Responsibilities include developing compliance documentation, reviewing system vulnerabilities, and mentoring junior analysts. This role demands strong communication skills and the ability to work collaboratively with various teams.

Qualifications

• 10 years of direct cybersecurity work experience.
• Knowledge of NIST SP 800-53, DoDI 8500.01, and DoDI 8510.01.

Responsibilities

• Provide cybersecurity expertise to surface combat system program offices.
• Lead efforts in Risk Management Framework (RMF) process.
• Develop Assessment & Authorization documentation according to DoD guidelines.
• Review systems scans/tests for compliance.
• Coordinate system hardening with applicable regulations.
• Collaborate with program offices to follow cybersecurity regulations.
• Advise customers on secure design and implementation.
• Identify security vulnerabilities and recommend mitigations.
• Provide mentorship and training to team members.
• Build briefs for decision makers.

Skills

Cybersecurity expertise

Communication skills

Mentorship

Risk Management Framework (RMF)

Education

Bachelor’s Degree in Cybersecurity Management or equivalent

Tools

eMASS

Security Content Automation Protocol (SCAP)

Assured Content Assessment Solution (ACAS)

Job description

Current job opportunities are posted here as they become available.

Technomics is a growing employee-owned, decision analytics company that specializes in cost and economic analysis to facilitate better decisions faster. We enable a wide range of clients across the Federal government, from senior level policy makers to program managers, to choose smartly, buy effectively and operate efficiently. We deliver practical, credible and defensible results offering actionable insights by applying data-driven and analytics-based approaches in combination with multidisciplinary talent, subject matter experts, and tangible and repeatable assets in the form of databases, models, approaches and techniques.

Senior Analystshave the knowledge, skills, abilities and initiative to deliver timely, practical and innovative solutions to our clients as part of high-performing project teams typically composed of a mix of junior and mid-level analysts who will look to you for technical acumen and mentoring.

Our employee-owners pride themselves on their ability to apply deep analytical rigor and innovative thought that assist clients in understanding and solving a myriad of challenging resource planning and management problems.

This position is located in Arlington, VA.

Role & Responsibilities

• Provide cybersecurity expertise to surface combat system program offices.
• Lead efforts to bring platform information technology systems through the full life cycle of the Risk Management Framework (RMF) process to achieve/renew Authority to Operate (ATO).
• Develops, coordinates, and reviews detailed Assessment & Authorization documentation in accordance with DoD Instruction 8510.01 – DoD Information Assurance Assessment and Authorization (A&A) Process (RMF).
• Review systems scans/tests using the Security Content Automation Protocol (SCAP) Compliance Checker (SCC), and the Assured Content Assessment Solution (ACAS).
• Coordinate with support team to ensure the hardening of systems under test to conforms all applicable regulations from DoW and the Defense Information Systems Agency (DISA). This includes but is not limited to Security Technical Implementation Guides (STIG), Security Requirements Guides (SRG).
• Work with the NAVSEA, PEO IWS, combat system program offices to ensure DOW/DON cybersecurity regulations and best practices are followed in the design, development, and sustainment of the integrated combat systems and weapon systems.
• Work as a team player comfortable interacting with many different people and effective at verbal and written communication, supporting face-to-face meetings, phone, and email interactions with program leads, engineers, and team members.
• Advise DoW customers on secure design and implementation of systems and capabilities.
• Identify security vulnerabilities and weaknesses in SW, HW and Architecture design for mission environments and be able to make recommended mitigations.
• Provide mentorship and training to other team members.
• Build briefs to convey critical information to decision makers.

Qualifications

• Experience: 10 years direct cybersecurity work; experience evaluating the cyber compliance of a system against current RMF and DoW Cybersecurity policies
• Education: Bachelor’s Degree (BS/BA Cybersecurity Management or equivalent technical degree)
• Knowledge of NIST SP 800-53, DoDI 8500.01, and DoDI 8510.01.

Desired Qualifications

• DoD 8570 Information Assurance Management (IAM) III or IAT III Certification
• Proficiency with the Enterprise Mission Assurance Support Service (eMASS) & eMASSter tools.
• Experience working in an acquisition program office environment with documentation, protocols, formats, and deadlines.
• Familiarity with Navy combat systems such as SSDS and AEGIS.
• A working knowledge of DON, NAVSEA, and PEO IWS cyber regulations.

We are an Equal Opportunity Employer. As an Equal Opportunity Employer, we do not discriminate on the basis of race, color, religion, national origin, sex, age, marital status, disability or veteran status.