Cybersecurity Analyst

IvoryCloud is seeking an experienced Cybersecurity Analyst to support DCMA’s Program cybersecurity evaluation of product submissions at the DCMA facility in San Diego, CA.

Responsibilities

• Serve as a technical subject matter expert (SME) supporting cybersecurity evaluation of product submissions to the Program.
• Provide technical expertise and advisory support to the Government Program on cybersecurity requirements, technical standards, risk management, and assessment methodologies.
• Apply cybersecurity principles to embedded systems, software, firmware, wireless communications, networking, encryption, authentication, and supply chain security relevant to the Program.
• Interpret cybersecurity assessment outputs including penetration testing results, vulnerability assessments, software assurance evaluations, firmware analyses, and other assessment data to evaluate program-candidate technology risk.
• Review cybersecurity assessment reports, supporting technical documentation, and assessment evidence to assess completeness, technical sufficiency, and adequacy for Government technical acceptance decisions.
• Identify cybersecurity vulnerabilities, threats, attack vectors, and residual risks that could adversely affect DoW missions, warfighter safety, national security, operational resilience, or the confidentiality, integrity, and availability of Government information and systems.
• Provide technical recommendations on cybersecurity findings, risk mitigation strategies, assessment requirements, technical acceptance, and applicability of cybersecurity requirements to candidate technologies.
• Verify and validate whether a company’s submitted remediation plan sufficiently mitigates cyber vulnerabilities identified in provided assessments.
• Maintain awareness of applicable Federal statutes, DoW policies, NDAA requirements, cybersecurity frameworks, industry best practices, and Government processes relevant to the Program.
• Provide technical consultation and advisory support to Government personnel and stakeholders related to cybersecurity matters impacting program technologies, assessments, policy implementation, and execution.
• Monitor emerging cybersecurity threats, vulnerabilities, technologies, and policy developments affecting small unmanned systems, and provide recommendations to support continued evolution of the Program.

Requirements

• U.S. Citizenship: Required and non-negotiable (separate from eligibility to work in the U.S.).
• Clearance: Favorably adjudicated (or actively in-progress) Tier 3 background investigation required for access to Controlled Unclassified Information (CUI). Interim or final security clearance granted by the Department of War (DoW) required prior to start of performance.
• Current clearance: ADP/IT II clearance in the Defense Information System for Security (DISS) required.
• Experience: Minimum of 5 years of practical cybersecurity experience preferred, ideally including technology risk assessment or product security evaluation.
• Location: San Diego, CA on-site at the DCMA facility.
• Demonstrated knowledge of cybersecurity principles applicable to embedded systems, software, firmware, wireless communications, networking, encryption, authentication, and supply chain security.
• Demonstrated expertise applying federal security directives, including NIST SP 800-53 controls and NIST SP 800-161 (Supply Chain Risk Management), and navigating the DoD/DoW Risk Management Framework (RMF) to achieve an Authority to Operate (ATO).
• Experience interpreting cybersecurity assessment methodologies, penetration testing results, vulnerability assessments, software assurance evaluations, and firmware analyses.
• Ability to evaluate completeness, technical sufficiency, and adequacy of cybersecurity assessment reports and supporting evidence for Government technical acceptance decisions.
• Working knowledge of applicable Federal statutes, DoW policies, NDAA requirements, and cybersecurity frameworks relevant to small unmanned systems.

Technologies

• DoD/DoW Risk Management Framework (RMF)
• Authority to Operate (ATO)
• NIST SP 800-53
• NIST SP 800-161
• Defense Information System for Security (DISS)
• ADP/IT II
• CompTIA Security+
• CISSP
• CISM

Education

• Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline

Certifications

• No specific certification is mandatory under current program requirements.
• CompTIA Security+, CISSP, CISM, or an equivalent cybersecurity certification preferred.

Benefits

• Salaried position with participation eligibility in company and Business Development bonus programs
• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Referral program
• Retirement plan
• Vision insurance

Preferred Qualifications

• Direct experience supporting DCMA or related programs
• Experience evaluating embedded systems, firmware, and supply chain security risk for commercial or defense technologies
• Familiarity with the DoW Risk Management Framework (RMF) and ATO process
• Experience reviewing third-party penetration test results and software assurance evaluations for federal acceptance decisions
• Active or recent industry certification such as CompTIA Security+, CISSP, or CISM

Compensation: USD 90,000 - 120,000 per year