Note: The job is a remote job and is open to candidates in USA. Aerstone is a service-disabled, veteran-owned small business that specializes in cybersecurity services. They are seeking a Senior Cybersecurity Analyst to lead assessments of customer security controls based on the NIST Risk Management Framework, ensuring the security of applications, cloud systems, and other enterprise information systems.
Responsibilities
- Project planning
- Coordination with customers and peers
- Review of system security plans and related documentation
- Interviewing subject matter experts and other key personnel
- Performing in-depth risk analysis
- Reporting
Skills
- 7+ years of experience working with security related concepts across different system tiers including applications, operating systems, databases, network infrastructure, and cloud services
- Experience with risk-based control assessment methodologies, including risk identification (threats sources and threat events), risk analysis (likelihoods and impacts), evaluation, and remediation
- Excellent writing skills and reporting capabilities
- CISSP certified or the ability to work towards obtaining the certification
- Demonstrated ability to lead multiple projects simultaneously and to work in a highly dynamic, rapidly changing environment
- Knowledge of threat modeling techniques and methodologies
- Experience developing assessment reports that effectively and concisely communicate results and risks to a variety of stakeholders
- Excellent interpersonal, communication (written and verbal), organizational, and analytical skills
- Excellent consultative skills and the proven ability to work effectively with business partners, internal management and staff, vendors and consultants
- Proven ability to communicate technical issues to technical and non-technical business partners
- Experience preparing and leading assessment interviews of highly-technical information systems
- Strong attention to detail, both in reviewing system documentation and creating reports
- Experience leading or assisting with security risk assessments or cyber security related initiatives/projects
- Strong project management skills with experience managing a portfolio of engagements
- Demonstrated ability to serve as risk assessment subject matter expert (SME)
- Bachelor's degree
- Ability to gain and maintain an agency public trust clearance. TS clearance a plus
- 7+ years of experience in the security aspects of multiple platforms, operating systems, software, communications, and network protocols
- Expert knowledge of NIST SP 800-53 Rev 4 and experience executing assessments against it
- Subject matter expertise of one or more industry risk management frameworks, such as NIST SP 800-30, NIST SP 800-39, ISO 27005/31000, CMMC, & PCI
- Familiarity with cloud platforms and the customer shared responsibility model
- Familiarity with FISMA, FedRAMP, and NIST SP 800-series publications
- Experience assessing cloud-based information systems
- Strong technical experience, including reporting and representing findings from technical tests
- Experience with MS Project or other project management tools
Benefits
- Work from home opportunities
- Excellent health benefits
- Certification & training opportunities for its employees
Company Overview