Cybersecurity Analyst

Amentum•Norfolk, VA

22h•$60,000 - $90,000•Onsite

About The Position

Amentum is seeking a Cybersecurity Analyst to provide onsite cybersecurity technical support to the Navy in Portsmouth, VA. The Analyst will provide Cybersecurity analysis in support of unclassified and classified Assessment & Authorization (A&A) requirements. The ideal candidate will have general knowledge across cyber-related functional areas including CND (Computer Network Defense), Incident handling, Cybersecurity Tools, Risk Assessments, PKI, Analysis and Reporting, A&A, System/Software cybersecurity engineering and Cybersecurity Configuration Management. Tasking will include: • Provide Subject Matter Expertise to aid Program Managers in the development of A&A documentation. • Perform a technical review of A&A documentation for compliance with applicable DoD cybersecurity policies. • Perform system Information Assurance Vulnerability Management (IAVM) • Perform Security Technical Implementation Guidance (STIG) compliance audits. • Perform risk analyses and recommend mitigating controls. • Assess security compliance, support program security reviews, and coordinate and compile security-related documentation. • Assist with the preparation and revision of cybersecurity policy and guidance documents for specific cybersecurity related technologies. • Provide critical written and oral analysis of security architecture documentation and vulnerability and risk assessments. • Assist in the development of plan of actions and milestones (POA&M) and tracking of milestones within POA&Ms directly related to cybersecurity requirements. • Perform validation of cyber security controls in support of A&A efforts. • Coordinate with system owners to ensure the appropriate A&A artifacts are developed to support system authorization. • Develop IT sustainment documents and actions and renewal documentation. • Provide security incident reports as required outlining the specific security issue, critical concerns, and remediation actions required to resolve or mitigate the vulnerabilities. • Serve as security advisor to the Government in all aspects of Cybersecurity and Risk Management Framework (RMF) • Identify attempted and successful penetrations and information attacks and develop Courses Of Action (COAs).

Requirements

Must be able to obtain and maintain a Secret US Government Clearance. Note: US Citizenship is required to obtain a Secret Clearance
Bachelor's degree in Cybersecurity and 0-2 years experience.
Must have one of the following cybersecurity certifications: Security+, CASP, CAP, GSLC, CISA, CISM, CISSP.
Ability to troubleshoot software and hardware for system integration.
Experience in the areas of Information System Security, System/Network Administration and IT System Implementation and Maintenance.
Excellent communications and analytical skills; working knowledge of computer systems and integrated software application programs

Nice To Haves

Active Secret US Government clearance.

Responsibilities

Provide Subject Matter Expertise to aid Program Managers in the development of A&A documentation.
Perform a technical review of A&A documentation for compliance with applicable DoD cybersecurity policies.
Perform system Information Assurance Vulnerability Management (IAVM)
Perform Security Technical Implementation Guidance (STIG) compliance audits.
Perform risk analyses and recommend mitigating controls.
Assess security compliance, support program security reviews, and coordinate and compile security-related documentation.
Assist with the preparation and revision of cybersecurity policy and guidance documents for specific cybersecurity related technologies.
Provide critical written and oral analysis of security architecture documentation and vulnerability and risk assessments.
Assist in the development of plan of actions and milestones (POA&M) and tracking of milestones within POA&Ms directly related to cybersecurity requirements.
Perform validation of cyber security controls in support of A&A efforts.
Coordinate with system owners to ensure the appropriate A&A artifacts are developed to support system authorization.
Develop IT sustainment documents and actions and renewal documentation.
Provide security incident reports as required outlining the specific security issue, critical concerns, and remediation actions required to resolve or mitigate the vulnerabilities.
Serve as security advisor to the Government in all aspects of Cybersecurity and Risk Management Framework (RMF)
Identify attempted and successful penetrations and information attacks and develop Courses Of Action (COAs).