Staff Cybersecurity Analyst / Information Systems Security Engineer (ISSE)

What you'll do

• Perform compliance audits and vulnerability assessments to identify system deviations from security policies.
• Establish program control processes to mitigate risks and obtain system certifications and accreditations.
• Implement government security policies and provide recommendations on process tailoring.
• Validate security requirements and recommend additional safeguards to protect the network environment.
• Support formal Security Test and Evaluation (ST&E) through pre-test preparation and result analysis.
• Document certification activities and maintain the Plan of Actions and Milestones (POA&M).
• Conduct periodic audits of system security and monitor corrective actions until closure.
• Utilize tools like Nessus, Rapid7, and Splunk for network monitoring and vulnerability detection.

What we're looking for

• Active TS/SCI with Polygraph is required to start.
• U.S. Citizenship is required.
• 12 years of experience with a Bachelor's degree; 10 years with a Master's degree; 8 years with a PhD; or 16 years with a High School diploma.
• Experience reviewing technical security assessments of computing environments to identify vulnerabilities or non-compliance.
• Experience implementing the Risk Management Framework (RMF) process and supporting/documenting certification and accreditation artifacts.
• Experience supporting the A&A process for system accreditation.
• Familiarity with NIST800.53rev4, CNSS-1253, NSM-8, and Zero Trust Architecture concepts.
• Familiarity with tools such as Nessus, Rapid7, Splunk, Xacta, and Microsoft Office suite.
• CISSP, CASP, or other IT security certifications (preferred).
• Experience using Rapid 7 or Tenable Nessus applications (preferred).
• Background in Technical Writing or Instructional Systems Design (preferred).
• Power-user knowledge in Windows, Linux, or AWS/Azure cloud infrastructure (preferred).