Cyber Security Analyst II (Developer)

The Cyber Security Analyst II (Developer) supports cybersecurity operations across vulnerability management, security monitoring, compliance assessment, and the development of custom tools and dashboards. This role leverages ACAS, eMASS, HBSS/ESS, Microsoft 365 Defender, and SIEM technologies to enhance automation, visibility, and the overall security posture. This position is remote.

Responsibilities

• Perform vulnerability scans on IT assets in response to tickets or directions from the Cybersecurity Manager.
• Monitor, analyze, detect, and respond to cyber events and incidents across information systems and networks.
• Provide guidance on an integrated defense posture and utilize cybersecurity solutions to deliver operational services, including intrusion detection and prevention, network intrusion awareness, security event handling, data spillage management, and incident response actions.
• Evaluate IT assets for cybersecurity compliance in line with DISA STIG requirements.
• Create POA&Ms to track overdue vulnerabilities, STIG deviations, and approved risk-based remediation actions.
• Review and investigate security alerts and incidents from Microsoft 365 Defender and other monitoring platforms.
• Use eMASS to maintain and update POA&M status.
• Assess device compliance status from HBSS/ESS.
• Collaborate with NEC Operations team members to remediate and mitigate security vulnerabilities.
• Stay informed with cybersecurity intelligence and provide recommendations to strengthen the security posture.
• Develop, maintain, and enhance locally created cybersecurity tools and automation supporting ACAS/Tenable scan execution, scheduling, analysis, reporting, remediation tracking, and automated analysis of scan results.
• Create and maintain toolsets for quarantine recommendations, workflow actions, or system isolation based on scan results, approved business rules, and Cybersecurity Manager guidance.
• Develop scripts, queries, dashboards, automated reports, and visualizations that support vulnerability management, compliance visibility, operational decision-making, and key cybersecurity metrics.
• Build and sustain an IT Common Operational Picture for use by the IT Monitoring team, Cyber team, and leadership, integrating approved cybersecurity and IT operations data sources.
• Assist in defining technical requirements, data sources, business rules, workflows, and acceptance criteria for locally developed cybersecurity tools.
• Maintain source code, scripts, configuration files, technical documentation, user guides, and SOPs for locally developed tools; troubleshoot, debug, test, and validate tools and automation workflows to ensure accuracy, reliability, security, and compliance.
• Coordinate with cybersecurity analysts, system administrators, network administrators, database administrators, and monitoring teams to improve automation, operational visibility, and workflow efficiency.
• Perform additional duties as assigned.

Requirements

• High School Diploma or GED equivalent.
• Minimum of two years of experience performing vulnerability scans using Tenable SecurityCenter, Tenable.sc, or ACAS.
• Experience performing cybersecurity analyst functions in DoD or Federal Government.
• Experience developing scripts, automation, dashboards, reports, or locally created tools to support cybersecurity, IT operations, vulnerability management, compliance, or monitoring functions.
• Experience working with structured data, reports, exports, APIs, databases, or log sources to support cybersecurity analysis and operational reporting.
• DoD 8570 certification or ability to obtain certification within six months of contract start.
• U.S. citizenship.
• Active Secret security clearance or higher.
• Ability to pass a pre-employment background check.

Technologies

• ACAS, eMASS, HBSS/ESS, Microsoft 365 Defender, SIEM
• Tenable SecurityCenter, Tenable.sc
• PowerShell, Python, SQL, JavaScript, C#, .NET
• Power BI, SharePoint, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft 365

Benefits

• Paid holidays
• Paid time off
• 401K with employer match
• Dental
• Vision
• Health insurance plans
• Life and disability benefits

Knowledge, Skills, and Abilities

• Ability to analyze log files, firewall logs, IDS logs, endpoint security alerts, and vulnerability data to identify threats and support incident response.
• Working knowledge of Host Based Security Systems, Endpoint Security Solutions, ACAS vulnerability scanners, SIEM analysis, and Information Assurance Vulnerability Alert management.
• Capability to develop scripts, tools, dashboards, or automation to support cybersecurity operations, vulnerability management, reporting, or compliance tracking.
• Proficiency in scripting or development languages such as PowerShell, Python, SQL, JavaScript, C#, .NET, or similar.
• Ability to design, test, document, and maintain locally developed tools for cybersecurity and IT operations.
• Skill in parsing, transforming, correlating, and reporting data from multiple sources including vulnerability scanners, endpoint tools, SIEM, ticketing systems, and asset inventories.
• Knowledge of ACAS/Tenable scan results, vulnerability scoring, plugin data, asset risk, scan coverage, remediation tracking, and reporting requirements.
• Understanding of dashboard development, data visualization, and operational reporting concepts.
• Ability to maintain Common Operational Picture dashboards, cybersecurity dashboards, Power BI reports, and SharePoint dashboards or similar visibility tools.
• Capability to translate cybersecurity requirements into technical tool requirements, automation workflows, reports, and dashboards.
• Strong troubleshooting skills for application issues, script errors, data quality problems, permission issues, and integration challenges.
• Excellent verbal, written, and interpersonal communication, plus strong organizational and multitasking abilities.
• Strong presentation and coordination capabilities; adaptable to fast-paced operational environments.
• Proficiency with Microsoft Word, Excel, PowerPoint, SharePoint, and Microsoft 365 collaboration tools.
• General understanding of secure coding practices, access control, least privilege, data protection, and handling of sensitive cybersecurity data.

Physical Abilities

• Sufficient fine motor skills for computer use and repetitive keyboarding.
• Ability to work in confined rack spaces.
• Adequate vision and communication abilities to perform essential duties.
• Occasional kneeling, bending, and twisting at the waist.
• Regularly able to reach below shoulder height and, on occasion, above shoulder height.
• Ability to push, pull, carry, and lift up to 50 pounds regularly, with greater weights on occasion.

Preferred Qualifications

• Bachelor's degree in IT, Cybersecurity, Computer Science, Software Development, Information Systems, or related field, or equivalent relevant experience.
• ACAS and or HBSS/ESS Administrator certification obtained within the last three years.
• Experience building cybersecurity tools, automation, dashboards, or reports using PowerShell, Python, SQL, Power BI, SharePoint, or similar platforms.
• Experience integrating and analyzing data from cybersecurity and IT systems, including ACAS/Tenable, Microsoft 365 Defender, SIEM, eMASS, ticketing, or asset management.
• Experience supporting DoD cybersecurity operations, including RMF, POA&M management, IAVA management, DISA STIG compliance, or vulnerability remediation.

E-Verify

OSC EdgeTech participates in E-Verify. We provide the Social Security Administration (SSA), and if necessary the Department of Homeland Security (DHS), with information from each new employee's Form I-9 to confirm work authorization.

Reasonable Accommodation

OSC EdgeTech, LLC will provide reasonable accommodations in accordance with applicable state and federal laws to qualified individuals with disabilities. If you have a disability and would like to request an accommodation to apply, please email [email protected].