Cyber Security Analyst

Bering-Alaka`ina Holdings, LLC is looking for a Cyber Security Analyst to support our government customer out of Maui, Hawai'i.

• Ensure that personnel accessing information systems have the proper and current Information Assurance (IA) certification to perform administrative functions in accordance with (IAW) DoD Manual 8140.03 / DoDM 8100.03 Cyberspace Workforce Qualification and Management Program, DAFMAN 17-1305, and AFMAN 17-1302-O.
• Conduct self-inspections on the customers COMPUSEC Program IAW applicable MICT or equivalent checklists.
• Provide inspection support during Inspector General (IG) cybersecurity and COMSEC inspections at the 15th SpSS.
• Accept, review, and provide a response to all tickets assigned to the Office within five (5) business days of receipt.
• Review software management inventories and perform software management reviews of core communications networks IAW AFMAN 17-1203, Chapter 3.
• Research software for approval to use on core communications networks and monitor the Ports, Protocols, and Services Management Program (PPSM) for NIPRNet and SIPRNet IAW DoD 8551.01 and AFSSI 8551.
• Monitor and track the Data Loss Prevention Program (USB external storage device process), including ensuring that a Removable Media User Agreement is on file for each user on an approved waiver spreadsheet.
• Track the request form from receipt through device implementation by the Network Operations Support Center (NOSC), providing a "whitelist" of approved devices to the customer ISSM.
• Develop and distribute a bi-monthly cybersecurity newsletter and post materials on the IT Support Hub site.
• Implement vulnerability remediations IAW the DISA Security Technical Implementation Guides (STIG) and Assured Compliance Assessment Solution (ACAS) scans, providing patch management IAW TO 00-33A-1109.
• Manage the Plan of Actions & Milestones (POA&M) approval process, perform security inspections, analyze results, and recommend corrective actions for network vulnerabilities and STIG non-compliances.
• Appoint primary and alternate COMSEC Responsible Officers (CRO) and comply with DoD, Air Force/Space Force, and local COMSEC requirements and training, including AFMAN 17-1302-O.
• Operate encryption devices, perform firmware updates on encryption devices, coordinate periodic/as-needed COMSEC loads, perform courier duties, and complete COMSEC records including inventories, destruction reports, and local coordination sheets.
• Furnish qualified on-site technicians to provide network vulnerability management, system scanning, network server support, troubleshooting, repair, and Assessment & Authorization (A&A)/Authority to Operate (ATO) documentation for customers communications systems encompassing the operational network.
• Manage communications systems utilizing approved AIS including Assured Compliance Assessment Solution (ACAS), AFNetOps Compliance Tracker (ACT), System Center Configuration Manager (SCCM), Remote Desktop, Service Now and Remedy Ticketing System.
• Provide routine scans of security threats and perform corrective action IAW DISA STIGs, TCNOs, and local security guidance.
• Monitor cyber event tasking in order to detect and mitigate malicious cyber events and coordinate with CFP for resolution of non-advertised TCNOs.
• Monitor and maintain SCCM server health, ensuring SCCM is operational and prepared for vulnerability patching.
• Utilize approved AIS to monitor, review, and generate applicable TCNO status listings and report to CFP weekly.
• Complete cyber network vulnerability management scans across the customers NIPRNet, SIPRNet, and JWICS encompassing all network device Operating Systems (OS) utilizing approved AIS.
• Monitor vulnerabilities on NIPRNet, SIPRNet, and JWICS network systems using scanning methods IAW local operating procedures.
• Other duties as assigned by Supervisor.

• Must hold a current and verifiable CompTIA Security+ certification.
• Current Information Assurance (IA) certification to perform administrative functions in accordance with (IAW) DoD Manual 8140.03 / DoDM 8100.03 Cyberspace Workforce Qualification and Management Program, DAFMAN 17-1305, and AFMAN 17-1302-O.
• Appropriate information system environment certification for information systems with elevated privileges as required by the Government representative.

• Minimum of five (5) years’ experience in Information security, cybersecurity, or a related field.
• In-depth knowledge of security protocols, procedures, and technologies, including network security (firewalls, intrusion detection/prevention systems), cryptography (encryption, decryption), access control (authentication, authorization), and incident response and management.
• Strong understanding of security frameworks and regulations, such as NIST Special Publication 800-53 (or superseded regulation), DoD Instruction 8500.02 (or superseded regulation), and Risk Management Framework (RMF).
• Experience using the Enterprise Mission…