Cyber Analyst 1

Torch Technologies, Inc.•Eglin AFB, FL

5d•Onsite

About The Position

Torch Technologies is seeking a Cyber Information Assurance Analyst 1 (ISSO) to join a team Involved in the assessment and compliance of systems and networks within a networking environment or enclave. This position supports the Air Force Research Lab (AFRL). As a Cyber Information Assurance Analyst 1 (ISSO) your duties will include the following, but are not limited to: Responsible for ensuring the appropriate operational security posture is maintained for the assigned IT. Implements and enforce all AF cybersecurity policies, procedures, and countermeasures. Completes and maintains required cybersecurity certification: IAW AFMAN, JSIG, DJSIG. Ensure all users have the requisite security clearances and need-to-know, complete annual cybersecurity training, and are aware of their responsibilities before being granted access to systems according to AFMAN 17-1301. Maintains all authorized user access control documentation IAW the applicable AF Records Information Management System. Ensures software, hardware, and firmware comply with appropriate security configuration guidelines, e.g., security technical implementation guides/security requirement guides. Ensure proper configuration management procedures are followed prior to implementation and contingent upon necessary approval. Coordinate changes or modifications with the system-level ISSM, SCA, and/or the Wing Cybersecurity office. Initiate protective or corrective measures, in coordination with the ISSM, when a security incident or vulnerability is discovered. Reports security incidents or vulnerabilities to the system-level ISSM Initiates exceptions, deviations, or waivers to cybersecurity requirements.

Requirements

U.S. Citizenship
Associate’s degree in Cybersecurity, or a related field or equivalent experience. Advanced degree preferred.
A minimum of 2 years of experience in systems security.
A minimum of 2 years of experience utilizing system auditing software, e.g. Datadog, Splunk, LogRhythm.
Experience providing guidance on the following to include, but not limited to: Access Control, Configuration Management, System & Communications Protection, Contingency Planning, Incident Handling, System & Information Integrity, Security & Privacy Training & Awareness.
Experience in Software development activities, software and tools related to Cybersecurity.
Experience performing cybersecurity duties as outlined in DoWI 8500.01, AFI 17-130, and AFI 17-1301 for assigned AF IT.
Experience utilizing DoW tracking systems to input/document cybersecurity deficiencies, vulnerabilities, and change requests in the appropriate tracking system for each program, e.g., ACAS, eMass etc.
Experience with conducting information security continuous monitoring (CONMON) by maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions IAW approved ISCM strategy.
Ability to audit standalone systems not connected to an enterprise software repository.
At minimum a IAM Level 1 DoD 8140 certification, e.g. Security+ CE.
Secret/TS/TS-SCI clearance (is it required to start) and/or ability to obtain and maintain a DoW Clearance.

Nice To Haves

COMSEC responsibilities experience
Splunk experience

Responsibilities

Responsible for ensuring the appropriate operational security posture is maintained for the assigned IT.
Implements and enforce all AF cybersecurity policies, procedures, and countermeasures.
Completes and maintains required cybersecurity certification: IAW AFMAN, JSIG, DJSIG.
Ensure all users have the requisite security clearances and need-to-know, complete annual cybersecurity training, and are aware of their responsibilities before being granted access to systems according to AFMAN 17-1301.
Maintains all authorized user access control documentation IAW the applicable AF Records Information Management System.
Ensures software, hardware, and firmware comply with appropriate security configuration guidelines, e.g., security technical implementation guides/security requirement guides.
Ensure proper configuration management procedures are followed prior to implementation and contingent upon necessary approval.
Coordinate changes or modifications with the system-level ISSM, SCA, and/or the Wing Cybersecurity office.
Initiate protective or corrective measures, in coordination with the ISSM, when a security incident or vulnerability is discovered.
Reports security incidents or vulnerabilities to the system-level ISSM
Initiates exceptions, deviations, or waivers to cybersecurity requirements.