C2BMC Cyber A&A Engr

Cybersecurity Analyst

We are seeking a detail-oriented Cybersecurity Analyst to support critical cybersecurity initiatives. This position involves managing user accounts, conducting system assessments, performing Security Technical Implementation Guide (STIG) assessments, and supporting Risk Management Framework (RMF) activities. The ideal candidate will possess strong technical expertise in cybersecurity practices, compliance audits, and risk mitigation processes within DoD environments.

Position Responsibilities

• Manage and track DD Form 2875 user account forms and training for privileged and non-privileged accounts, including annual account validations and coordination with system administrators for account creation, modification, and removal.
• Assess systems and networks in virtual environments for compliance with configurations, policies, and standards using tools like STIG Viewer, SCAP, and ACAS.
• Perform Security Technical Implementation Guide (STIG) assessments and hardening for Windows, Red Hat Enterprise Linux (RHEL), and networking equipment using ConfigOS.
• Develop test plans and document expected outcomes of STIG checks.
• Update RMF documentation to ensure non-compliance issues are tracked and remediated.
• Implement government cybersecurity policies (e.g., NISPOM, NIST, DoD) and recommend process improvements.
• Conduct compliance audits, vulnerability assessments, and periodic reviews of systems to validate cybersecurity controls.
• Prepare and maintain RMF artifacts, including Test Results (TR), Authorization Boundary Diagrams (ABD), Network Topologies, Ports, Protocols, and Services Management documentation, and Plan of Actions and Milestones (POA&M).

Basic Qualifications

• 3+ years of related experience and/or post-secondary degree in a relevant discipline.
• Active TS/SCI clearance required.
• IAT Level II/IAM Level I DoD 8570 certification (e.g., Security+ CE or equivalent).
• Strong security engineering skills with knowledge of cybersecurity technology and DoD/Federal policies (e.g., DoDI 8500.01, NIST SP 800-53).

Required Qualifications

• Proficiency in Enterprise Mission Assurance Support Service (eMASS).
• In-depth understanding of the RMF Cybersecurity Lifecycle, including controls, overlays, requirements generation, architecture design, audit tools, and compliance assessments.
• Knowledge of Software Assurance (SwA) tools for static and dynamic code analysis (e.g., Fortify, Sonar Qube).

Preferred Qualifications

• Experience with Windows and Red Hat Enterprise Linux (RHEL) system administration.
• Background in working within virtual environments, dockers, and containers.
• Proficiency in administering ACAS and Endpoint Security Solutions (ESS).
• Experience using ConfigOS for system hardening.
• Experience working with or familiarity with Al/ML models is preferred.
• Identifies opportunities to apply Al for continuous improvement and innovation.

Join our team to enhance the cybersecurity posture of mission-critical systems and make a significant impact.