Description
We are seeking a Cloud Cybersecurity Analyst to join our collaborative team in designing, defending, and continuously evaluating our enterprise security architecture and government accreditation posture for critical IT networks. This position involves active threat modeling, incident response, continuous audit monitoring, vulnerability remediation, and strict regulatory compliance.
Responsibilities:
- Utilise COTS/GOTS and enterprise scanning tools to identify, analyse, and track network, system, and application-level vulnerabilities.
- Coordinate with IT teams to support containment, mitigation, and remediation of identified vulnerabilities and intrusions.
- Support threat modeling exercises and assist senior staff in evaluating security incidents to prevent future occurrences.
- Assist in validating established security requirements, assessing operational risks, and recommending baseline safeguards.
- Participate in formal Security Test and Evaluation (ST&E) preparations, assist during testing, and aid in drafting post-test analysis reports.
- Periodically review system audit logs, track open findings, and monitor corrective action plans until all issues are resolved.
- Assist in configuring, hardening, and maintaining secure operating systems, network access controls, and security applications.
Requirements:
- Bachelor’s Degree in Computer Science or related field.
- 2-5+ years of relevant Cyber experience.
- Experience as a Cyber Analyst, RMF Engineer, ISSO, Information Assurance Engineer, Vulnerability Manager, POA&M Manager.
- Hands-on tool experience associated with the role.
- Experience with NIST 800-53 and CNSSI 1253.
- Experience with risk management policies/procedures, including DODI 8510.01.
- Ability to communicate technical subjects clearly and concisely.
- Experience using vulnerability and compliance assessment tools such as Nessus, SCAP, or App Detective.
- At least one of the following cyber security certifications: Security+ CE, SSCP, CAP, CISM, CASP, CISSP, GSEC, GICSP, GSLC, CEH, CDNA, CSSLP.
- Experience assessing technical environments and translating implemented security controls into clear NIST SP 800-53 control narratives and supporting Authorization to Operate (ATO) documentation.
- Cloud Platform familiarity with at least one service offering from AWS, Azure, or Google GCP.
- US Citizenship and a Secret security clearance.
The salary range for this position is estimated to be between $100,000.00 - $145,000.00, commensurate on experience and technical skillset.