Cybersecurity Analyst - Senior

Responsibilities:

• Lead technical security control assessments in accordance with NIST 800-53 and other relevant regulations and standards.
• Interfacing with internal/external customers, program managers, senior leadership
• Conduct security assessments and generate detailed security and risk assessment reporting.
• Monitors system conformance to Authority to Operate stipulations and conditions
• Participates in the change management process, assessing security impact of proposed changes.
• Periodically review and validate changes in control status in eMASS.

Required Qualifications:

• 5+ years of experience in Cybersecurity.
• Proficient using Assessment and Authorization cybersecurity package management tools such as the Enterprise Mission Assurance Support Service (eMASS) or Telos’ Xacta IA Manager.
• Experience leading and conducting risk analysis and security control reviews in accordance with NIST 800-37/53 Risk Management Framework.
• Proficient with DISA STIG Viewer and SCAP Compliance Checker (SCC) or equivalent tools.
• DoDD 8570/8140 IAM Level 2 professional certification (e.g., Security+, CISSP, CISM, etc.)
• Ability to take initiative and work independently with minimal supervision, while effectively prioritizing and staying engaged with tasks.
• Ability to work efficiently and lead teams in a fast-paced environment and multi-task while still ensuring high quality of work
• U.S Citizen / Active DoD Secret Security Clearance.

Preferred Qualifications:

• Bachelor’s degree in Computer Science, or a related field, or equivalent combination of education and experience.
• Expert in use of Assessment and Authorization cybersecurity package management tools such as the Enterprise Mission Assurance Support Service (eMASS) or Telos’ Xacta IA Manager.
• Experience performing security audits of cloud infrastructure, ensuring compliance with the DoD Cloud Computing SRG, DoD Secure Cloud Computing Architecture, and CIS Benchmarks.
• Experience administering and hardening containers and container orchestration environments with Kubernetes
• Experienced implementing and enforcing security best practices for hardening various systems, including Windows, Linux, virtual machines, cloud services, and containers.
• Conducting DevSecOps security assessments, with a focus on security integration within CI/CD pipelines.
• Adept at deploying, configuring, and hardening cloud services across public, private, and hybrid environments, adhering to industry best practices.
• Experience with security tools, including end point protection, NextGen firewalls, data loss protection, web proxies, intrusion prevention systems, SIEM, and/or vulnerability scanners

Benefits:

• Generous 401(k) contribution, matching not required
• Company Paid Health Insurance
• Company Paid Dental insurance
• Company Paid Vision Insurance
• Company Paid Life Insurance
• Paid Training
• Home Office Stipend
• Paid Time Off

Location:

Remote with occasional travel to Hanscom AFB

Decision Point team has over 150 years combined experience delivering solutions based on sound research principals and critical thinking. Members of the team have been trusted with hardening and assessment of some of our nation’s critical defense infrastructure and weapon systems. We understand that achieving and maintaining adequate security requires thorough understanding of people, processes, and systems. Challenges associated with each of these areas are dynamic and can be costly. Let our team work with you to deliver practical, cost effective solutions.