Cybersecurity Systems Analyst (Senior)

The Senior Cybersecurity Systems Analyst will deliver on-site execution of cybersecurity assessments, compliance validation, and vulnerability management activities for USSOCOM and related components. The role supports regulatory alignment with DoD and USSOCOM guidance through scanning, remediation tracking, security reviews, self-inspections, and reporting.

Location & Salary

• Location: Tampa, FL (onsite)
• Compensation: USD 95,000 - 105,000 per year

Core Responsibilities

• Provide dedicated, on-site support for cybersecurity assessments, compliance, and validation.
• Conduct cybersecurity compliance and validations, including site visits, inspections, scanning, remediation, patch compliance verification, and security reviews.
• Assess the SIE organizational security posture of USSOCOM Component Commands, TSOCs, and deployed forces, and verify compliance with DoD, DIA, and USSOCOM guidance.
• Develop and execute an approved assessment schedule; produce reports summarizing findings and mitigation actions, delivered within 60 calendar days after each assessment completion.
• Track and report mitigation and completion status for actions taken at each assessed site until all items are complete.
• Identify common security risks by analyzing findings, establishing metrics, and identifying trends.
• Validate patching, perform validation scanning, develop Plans of Action & Milestones (POA&Ms), and report results according to applicable policies, procedures, and regulations.
• Assist Component Commands, TSOCs, and deployed forces with required scanning and vulnerability management programs.
• Track and report compliance status of cybersecurity regulations and directives to higher headquarters organizations (including USCYBERCOM and DIA).
• Maintain records documenting compliance with federal laws, directives, and policies, and provide USSOCOM and delegated organizations free and open access to those records.
• When audits or reviews produce findings or risks, provide a POA&M for correcting or mitigating the weakness within three business days, and provide ongoing status updates.
• Review Information Security Plans and Physical Security Plans periodically, recommending measures to safeguard classified, sensitive, and unclassified information.
• Document that physical security elements supporting DoD networks, systems, services, and devices comply with specified security controls for access control across USCYBERCOM, DISA, DoD, DIA, NSA, USSOCOM, Component Command, TSOC, and deployed forces.
• Execute USSOCOM and subordinate Information Assurance Vulnerability Management (IAVM) programs, including tracking and reporting IAVA and IAVB compliance status.
• Coordinate with subordinate organizations for required reporting and compliance status, including tracking POA&M status through completion.
• Execute USSOCOM cybersecurity self-inspection programs, tracking and reporting compliance and completion.
• Perform FISMA network and system security reviews in alignment with USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.
• Perform and publish trend analyses of SIE cybersecurity assessments, lessons learned, and recommended mitigation approaches within 30 calendar days after assessment completion.
• Provide subject matter expertise for COA development and implementation of cybersecurity mitigation strategies.
• Develop and implement processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.
• Develop and submit documentation for government approval, including weakness identification, testing approaches for manual and automated methods, and a process for submitting results for evaluation and mitigation.
• Respond to cybersecurity RFIs from external organizations and NetOps decision makers.
• Implement cybersecurity-related tasks directed in task orders, policies, procedures, regulations, and directives, including items such as Insider Threat Mitigation, data transfer authorities, and privileged user oversight.
• Coordinate with USSOCOM and subordinate organizations to support reporting and compliance status, including tracking associated POA&Ms.
• Demonstrate professional behavior and clear, accurate English communication in both verbal and written forms when working with customers, management, and coworkers.

Required Qualifications

• Experience: 8+ years (years of experience required)
• Education: BA/BS
• Clearance: Active TS/SCI clearance required (US citizenship required to obtain a US Security Clearance)
• Certification: Current DoD 8570.01-M, IAT Level III or IAM Level III
• Example certifications: CISSP (or Associate), CASP+CE, CISA, CISM, CCISO, GCED, GCIH, CCSP, or GSLC
• Working knowledge: RMF
• Desired knowledge: Telos Xacta or Enterprise Mission Assurance Support Services (eMASS)
• DoD IA knowledge: DoD IA processes and policies (including DODI 8510.01, NIST, CNSS, and other cybersecurity policies, CJCSM 65101.01, Incident Response, and other IA policies)
• Additional technical background: System administration; networking; identity management; Microsoft and Linux operating systems; database; mobility (architecture and engineering preferred)
• Combatant command experience: Experience with US Combatant Commands (USCENTCOM/USSOCOM) is desired

Technologies

• RMF
• Telos Xacta
• Enterprise Mission Assurance Support Services (eMASS)
• Microsoft operating systems
• Linux operating systems
• Database
• WLAN
• VPN
• Mobility Access
• Data at Rest
• Enterprise Gray network solutions

Schedule & Travel

• Hours: Monday to Friday, 6:00am to 4:00pm (attendance is essential, with exceptions for STD/LTD/FMLA and approved time off)
• Travel: Up to 10% to customer and test locations (government and vendor), which may involve airline travel
• Transportation: Independent personal transportation to office or work site is required

Physical Requirements & Work Notes

• May include lifting up to 40 pounds as necessary
• Work environment may be inside or outside depending on tasks; inside may include cubicle settings, and outside may involve various environmental conditions
• No hazards on job or unusual environmental conditions
• Ability to operate office equipment (PC, printer, copy machine, telephone, fax machine, and other work-related tools) is required
• When operating a vehicle for work purposes, must wear a seat belt and no cellular devices may be used while the vehicle is in motion
• In some cases, accommodations can possibly be made for POV if necessary

Benefits

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits, including 401(k) matching
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax-saving options
• Disability and life insurance
• Pet insurance