We are seeking a mission-focused Senior Cyber Threat Analystto support and contribute to our government customers success in Washington D.C.!
As the Senior Cyber Threat Analystyou will provide support for a high visibility Executive Branch customer. You will be the senior member on a team responsible for ensuring the security of critical information assets by risk management and accreditation support for a portfolio of applications.
This is a dynamic role that will require knowledge and understanding in Systems Security Planning and Controls compliance as well as a strong technical background to translate risk and security assessment results into engineering guidance and recommendations.
This position is hybrid telework with 2-3 days onsite weekly in Washington, DC. Given the unique mission requirements, there is no opportunity for full-time remote work arrangements.
Duties, Tasks and Responsibilities
Perform information security risk assessments to ensure security engineering principles and best practices are applied to applications architectures during the design, implementation, and operations phases.
Apply subject matter expertise to ensure the organizations portfolio of applications remain compliant with applicable federal and agency-specific policies.
Identify risks and implement or enforce information systems security policies and requirements, Risk Management Framework (RMF), NIST Cybersecurity Standards, and agency specific policies procedures.
Perform / assist with ISSO tasks and duties to include POAandM tracking and remediation.
Support information systems assessment and authorization activities to include drafting and/or validating documentation and SOPs and security policies.
Work with team members (contractor and government) to identify, evaluate, and address information systems threats and vulnerabilities.
Draft security technical documents/publications such as plans, procedures, and reports.
Proactively work with system administrations to communicate and resolve vulnerabilities.
Stay current with endpoint security threats, trends, and technologies and recommend solutions to improve the organization's security posture.
Provide design recommendations to the environment to improve security posture.
Work with team to implement new security technologies.
Required Experience, Education, Skills and Technologies
BA/BS in Engineering, Computer Science or related field (or 6 years equivalent experience)
10+ years of relevant work experience.
Understanding of the components of a comprehensive information security program, including governance, policy, organizational design, awareness and training, architecture, technologies, processes, and controls.
Extensive hands-on experience performing security assessments in Federal Government environments.
Specific experience analyzing application security controls in both cloud and on-premise applications.
Demonstrated experience applying information security and risk management policies and associated application and system configurations.
Experience interviewing subject matter experts and using knowledge to develop, edit, and revise documentation including standard operating procedures, system security plans, and policies and procedures.
Experience writing, editing, and/or managing IT security documentation and policy.
Security Clearance Level
All applicants for this position must have an active DoD TS/SCI level clearance.
Certification
DoD 8570 IAT III Certification or higher.
Work Schedule
Hybrid - Part on-site 2-3 days each week and the rest of the week is remote.
Benefits Offered
Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Tuition/Training Assistance, Parent l Leave, Paid Time Off, and Holidays.
Experience with the production and/or editing of technical drawings using MS Visio or similar design tools.
Effective communication skills, both written and verbal.