Sr. Cyber Security Analyst

Oneida Technical Solutions•Fort Belvoir, VA

3d•Onsite

About The Position

Oneida Technical Solutions, LLC (OTS), established in 2014, is a trusted provider of IT and cyber solutions in highly complex, regulated, and secure environments. Our expertise spans the U.S. Department of Defense (DoD), healthcare, higher education, law enforcement, retail, casino gaming, and beyond. With a reputation for delivering innovative cyber capabilities and IT modernization projects, OTS accelerates the implementation of cutting-edge solutions for DoD and commercial clients. Oneida Technical Solutions, LLC (OTS) is seeking an experienced Senior Analyst to support a contract in Fort Belvoir, VA. This position is located at Fort Belvoir in Virginia and reports to th e Senior Program Manager. Duties and Responsibilities: Provide support to the RNEC-NCR Belvoir following the DoD Cybersecurity Policy requirements set forth in DoDI 8500.01, "Cybersecurity," and DoDI 8510.01, "Risk Management Framework (RMF) for DoD Systems." Ensure information systems are configured in accordance with DISA STIGs, applicable patches, and other cybersecurity requirements. Manage the security of all Information Systems that are NEC-owned and maintained by the RNEC-NCR, including servers, workstations, network devices, and peripherals. Perform enterprise-wide internal and external vulnerability testing and scanning to assess security posture on both SIPRNET and NIPRNET networks utilizing DoD-approved solutions. Coordinate, facilitate , configure, implement, and maintain the minimum standards and requirements of Government initiatives such as RMF, Cyber Operational Readiness Assessment (CORA), and Information Assurance Vulnerability Management (IAVM) Program. Conduct Security Risk Assessments of resources, controls, vulnerabilities, and threats, and facilitate decisions to implement security countermeasures or mitigate risk. Monitor, detect, and defend the security of all Information Systems utilizing AESS modules and security solutions. Maintain all Risk Acceptance and Exception to Policy memos throughout their lifecycle. Provide guidance to customers for Assess and Authorize requirements for new applications and systems not approved for the DODIN -A. Review and submit all Tenant Support Plans (TSPs) and associated documentation to the change management board for Government review and approval.

Requirements

3 years of experience in Cybersecurity.
Intermediate System Administrator, Vulnerability Assessor, or Security Control Assessor certification (e.g., Security+, GSEC).
Experience with Windows Server Administration.
The Cybersecurity Analyst shall possess Security+ certification.
No Continuing Education (CE) .
Knowledge of COMSEC principles, methods, practices, systems, and procedures sufficient to administer the communications circuit security program and DoD EKMS program.
Experience with wireless monitoring.
Knowledge of log collection and analysis.
Knowledge and experience in communicating cybersecurity concepts to both technical and non-technical personnel; ability to develop technical documents and produce system design documentation.
Knowledge and experience with DoD Risk Management Framework (RMF) and use of eMASS .
Obtain required DoDM 8140.03 CE/Baseline Certifications prior to contract start.

Nice To Haves

Knowledge of securing Windows Servers, Windows Desktops, UNIX, Linux, virtual servers, log collection tools, and analysis techniques.
Ability to communicate cybersecurity concepts clearly and develop technical documents and system design documentation.
Experience with ACAS, managing and securing Active Directory user accounts, and compliance with DoD Security configuration guidance.
Project a positive image and professional manner at all times ; ability to work within a set time schedule.

Responsibilities

Provide support to the RNEC-NCR Belvoir following the DoD Cybersecurity Policy requirements set forth in DoDI 8500.01, "Cybersecurity," and DoDI 8510.01, "Risk Management Framework (RMF) for DoD Systems."
Ensure information systems are configured in accordance with DISA STIGs, applicable patches, and other cybersecurity requirements.
Manage the security of all Information Systems that are NEC-owned and maintained by the RNEC-NCR, including servers, workstations, network devices, and peripherals.
Perform enterprise-wide internal and external vulnerability testing and scanning to assess security posture on both SIPRNET and NIPRNET networks utilizing DoD-approved solutions.
Coordinate, facilitate , configure, implement, and maintain the minimum standards and requirements of Government initiatives such as RMF, Cyber Operational Readiness Assessment (CORA), and Information Assurance Vulnerability Management (IAVM) Program.
Conduct Security Risk Assessments of resources, controls, vulnerabilities, and threats, and facilitate decisions to implement security countermeasures or mitigate risk.
Monitor, detect, and defend the security of all Information Systems utilizing AESS modules and security solutions.
Maintain all Risk Acceptance and Exception to Policy memos throughout their lifecycle.
Provide guidance to customers for Assess and Authorize requirements for new applications and systems not approved for the DODIN -A.
Review and submit all Tenant Support Plans (TSPs) and associated documentation to the change management board for Government review and approval.