Cyber IA Analyst-Mid Assessor
Company | Chickasaw Nation Industries |
---|---|
Location | Odenton, MD, USA |
Salary | $70000 – $80000 |
Type | Full-Time |
Degrees | Bachelor’s |
Experience Level | Senior |
Requirements
- The ability to obtain, maintain and access classified information at the TS/SCI level.
- Five (5) years of overall experience in cybersecurity or network security position.
- Three (3) years of experience in a Certification and Accreditation/A&A role.
- DoD 8570 IAM/IA Technical (IAT) Level II certification.
- Demonstrated experience with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices.
- Strong understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253.
- Demonstrated experience with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS.
- Demonstratable understanding of key technologies areas/domain such as: Network, Mobility, Windows, UNIX, Cloud Environments and Cloud Native Tools/Services, Host Based Security System (HBSS)/Endpoint Security Solutions (ESS), Databases, Applications.
- Strong written and verbal communication skills for reporting assessment findings.
Responsibilities
- Conducts cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN.
- Evaluates systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing.
- Adheres to policies and processes for each assessment type.
- Supports assessment development and execution to ensure security expertise is properly applied.
- Coordinates logistics, test plans, and scope with the SCA Team Lead.
- Performs vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS.
- Analyzes security gaps and provide mitigation recommendations.
- Validates cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines.
- Provides risk analysis and assessment results for authorization recommendations.
- Participates in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R.
Preferred Qualifications
- Bachelor’s degree (IT-related field preferred) and a minimum of five (5) years of overall experience in cybersecurity or network security position and three (3) years of experience in a Certification and Accreditation/A&A role.