Cybersecurity Analyst

Intrepid Solutions and Services, LLC has an opening for a Cybersecurity Analyst & Information Security System Engineer (ISSE) supporting a US Army TENCAP client. This role delivers cybersecurity analysis, risk assessments, and Assessment & Authorization expertise across the system development life cycle, with 100% onsite work in Alexandria, VA and limited CONUS travel.

Why this role

• 100% onsite in Alexandria, VA with standard Monday-Friday hours
• Active TS/SCI clearance required for eligibility (no sponsorship for initial clearance or upgrades)
• Competitive compensation with a pay range of $185,000 to $225,000 per year
• Comprehensive benefits including 401(k) matching and multiple insurance options

Responsibilities

• Analyze existing and emerging TENCAP Information Systems and IT infrastructure to assess compliance with Army, DoD, and Federal IA policies, orders, tasks, and regulations
• Develop and document IA/cybersecurity standards and guides, including compliance, system security design, and assessments
• Conduct and document Risk Assessments including risk, probability of occurrence, resulting impact, and mitigating safeguards for unclassified and classified systems
• Provide Cybersecurity-ISSE recommendations and documentation throughout the system development life cycle with emphasis on technical aspects
• Deliver Cybersecurity-ISSE recommendations during meetings, briefings, and design reviews
• Provide Assessment & Authorization (A&A) expertise
• Develop and review the System Security Plan (SSP)
• Review security controls and provide updates as needed
• Provide technical validation of findings in Security Assessment Reports (SAR)
• Perform POA&M technical evaluations
• Assess hardware and software cybersecurity effectiveness to support system architecture design or change
• Assess hardware and software cybersecurity effectiveness to support the Program Change Control Management process
• Support acquisition services with Cybersecurity-ISSE guidance
• Ensure systems remain compliant with cybersecurity policies

Requirements

• Active TS/SCI clearance required. Unable to provide sponsorship of initial clearance or upgrade of existing clearance. Candidates without currently active TS/SCI clearances are ineligible
• Bachelor’s degree in computer science, computer engineering, or related field + 10 years of work experience OR 15 years of work experience
• Baseline certification requirements per DOD 8140.01, Cyberspace Workforce Management; including DFARS 252.239.7001 and AR 25-2
• IAM Level III or IAT Level III baseline certification
• IAW DOD 8570.01 certification
• 20+ years progressively complex cybersecurity experience supporting DoD or IC intelligence systems across design, development, integration, test, certification, and accreditation of security solutions
• 15+ years applying the Risk Management Framework (ICD 503) for accreditation of DoD or IC IT systems
• 10+ years supporting DoD acquisition programs/projects, including development of system security requirements and post Milestone “B” and “C” cyber documentation
• 10+ years cyber support for prototype testing
• Proficiency in LINUX including command line, file systems and networking concepts, scripting and automation, and system administration
• Knowledge and experience configuring network components and secure network transport components
• Experience supporting development, configuration, and deployment (connection approvals) of Cross Domain Solutions (CDS)
• Experience reviewing firewall rules with attention to ports, protocols, and services, and source and destination network traffic
• Experience supporting cybersecurity for Preliminary Design Review (PDR), Critical Design Review (CDR), and Final Design Review (FDR)
• Experience with vulnerability assessment and management tools including Nessus, ACAS, and SCAP
• Experience with Configuration Management
• Experience with system hardening using DISA STIGs or other Department/Agency hardening processes
• Experience supporting DevSecOps implementation
• Experience with NIST SP800-53 and RMF as defined by NIST 800-37
• Experience with A&A including activities leading up to authorization and post-authorization tasks
• Ability to translate policies and guidance into technical solutions and convey complex technical topics in leadership-ready briefings
• Compliance with DoD and Army training requirements in DOD 8140.01, DFARS 252.239.7001, and AR 25-2
• Subject to investigative and assignment requirements IAW AR 25-2, AR 380-67, and related personnel security regulations

Technologies

• LINUX
• PKI
• Data at Rest (DAR)
• Data in Transit (DIT)
• FIPS 140-2/3
• Nessus
• ACAS
• SCAP
• DISA STIGs
• DISA STIGs or other Department/Agencies hardening process
• DevSecOps
• NIST SP800-53
• NIST 800-37
• ICD 503
• RMF

Benefits

• 401(k) with company matching
• Dental insurance
• Medical insurance
• Health Savings Account option
• Flexible Spending
• Vision insurance
• Life and Disability Insurance
• Ancillary offerings (Hospital Indemnity, Accident, Critical Illness, Pet Insurance)
• Paid Time Off
• Holiday pay

Job Type: Full-time (onsite)