Cyber Security Analyst

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cherokee Federal

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1969

🏛️ Government

🔐 Security

🏢 Enterprise

Government • Security • Enterprise

Cherokee Federal is a U. S. federal systems integrator and government contractor that empowers mission success for more than 60 U. S. federal agencies. With a global workforce of over 5,000, it delivers advanced technology (cloud, cybersecurity, data & analytics), health services, intelligence analysis and operational support, logistics and sustainment, mission-critical manufacturing, program and engineering technical services, and dynamic contracting solutions to support federal priorities and national security. Cherokee Federal is part of Cherokee Nation Businesses and focuses on mission-focused, U. S. -made solutions.

📋 Description

• Review, submit, and track Authority to Operate (ATO) packages. • Evaluate existing mission systems and cybersecurity posture. • Create, review, and recommend Standard Operating Procedures (SOPs) and templates in accordance with applicable regulations, policies, and best business practices. • Review business processes and provide Risk Management Framework (RMF) guidance and documentation support. • Pull, analyze, and report on Host-Based Security System (HBSS) data. • Provide RMF recommendations and assist with preparation, delivery, tracking, and monitoring of RMF artifacts and documentation. • Support security reporting requirements associated with network operations, deployments, DISA STIG compliance, encryption initiatives, and security mandates. • Respond to questions, taskers, and data calls from government stakeholders and partner organizations. • Support authorization and accreditation activities for systems, applications, and infrastructure. • Identify, mitigate, and resolve cybersecurity issues and concerns. • Conduct vulnerability assessments utilizing ACAS, SCC, and other approved tools. • Support Information Assurance Vulnerability Alert (IAVA) compliance and reporting requirements. • Perform remediation, imaging, and threat mitigation activities. • Support Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), vulnerability scanning solutions, anti-virus platforms, HBSS, firewalls, web filtering solutions, and VPN technologies. • Implement and manage RMF processes for information systems and networks. • Ensure Accreditation and Authorization (A&A) documentation remains compliant with applicable regulations and guidance. • Develop and maintain documentation supporting Authority to Operate (ATO), Authority to Connect (ATC), Certificate of Networthiness (CON), and System Security Plan (SSP) requirements. • Conduct RMF validation activities and security control assessments. • Verify implementation of cybersecurity controls and security requirements. • Implement emerging cybersecurity solutions and best practices. • Provide cybersecurity guidance and support to system owners and stakeholders. • Participate in incident response and spillage handling activities. • Monitor and report IAVM metrics and vulnerability status. • Support cybersecurity education, awareness, and training initiatives. • Conduct security assessments including: • - Security policy development • - Security engineering and architecture design • - Operational security management • - Network security testing and evaluation • - Computer security incident response • - Vulnerability analysis • - Malicious code analysis • - Security risk assessment • - Security certification and accreditation • - Assess and Authorize (A&A) • - Risk analysis • - Trending analysis • - Event and Incident analysis • Document current security posture, identify vulnerabilities, and provide mitigation recommendations. • Perform other job-related duties as assigned.

🎯 Requirements

• Bachelor’s Degree in Computer Science, Information Systems, or a related field. • Minimum three (3) years of IT experience in a mid-to-large enterprise environment. • Strong knowledge of information assurance policies and procedures. • Experience supporting software, system, and enclave authorization and accreditation processes. • Knowledge of systems architecture, security risk analysis, risk mitigation reporting, and vulnerability assessments. • Experience supporting cybersecurity regulatory compliance and program management initiatives. • Extensive experience with: • - SCCM • - Group Policy Management • - Active Directory Services • - Operating System image management • - Patch management • - Security update deployment • Extensive experience conducting ACAS scans, reporting, and remediation. • Knowledge of eMASS and POA&M management. • Skilled in RMF implementation and continuous monitoring. • Experience creating and testing Continuity of Operations Plans (COOP). • Experience reviewing security logs, SCAP scans, and HBSS reports. • Ability to deploy applications and operating system images through enterprise ticketing systems. • Ability to validate deployed images are free from vulnerabilities before release. • Ability to analyze cybersecurity risks and provide effective mitigation strategies. • Security+ Certification required. • Ability to obtain and maintain a Public Trust. • Must pass pre-employment qualifications.

🏖️ Benefits

• Medical • Dental • Vision • 401(k) • Other possible benefits as provided