Cyber Security Analyst – Computer Systems Security Analyst 3

Role Overview

• Provides cybersecurity support to USAFE programs, ensuring mission‑critical systems maintain confidentiality, integrity, and availability in accordance with DoD cybersecurity standards and USAF directives
• Supports cybersecurity engineering, assessment, compliance, and continuous monitoring activities across assigned weapon systems, IT systems, or enterprise programs
• Works on complex and unique conceptual development and application related to DOD military operational requirements
• Leverages Information Technology (IT) knowledge and technical acumen to identify, address, assess, and improve domestic and international cyber requirements related to Intelligence, surveillance, and reconnaissance (ISR) mission objectives
• Utilizes the guidance and direction of the project, program, and/or division manager
• Provides qualitative and quantitative task-based analysis of cyber threat requirements associated with emergent technical threat vectors unique to the program/project platform applications
• Leverages technical IT methodologies and cyber expertise to provide management with assessment and mitigation requirements based on findings identified through cyber evaluation and analysis of current and future aviation ISR platforms, including autonomous aviation vehicles
• Provides primary and secondary stakeholders with cyber risk assessments of both unclassified and classified system assets and resources, developing solutions to address and determine overall security design requirements for IT systems
• Applies Cyber IT knowledge to identify, assess, and develop cyber-related solutions required for classified and unclassified systems related to AISR platforms
• Performs evaluation of IT security systems and related methodologies for effective levels of efficiency, operation, compliance with DOD information assurance (IA) standards, and engineering standards
• Reports to the program manager and works directly with the lead cyber security information system security manager (ISSM) to provide key cyber-related assessment and analysis methodologies
• Applies extensive cyber security knowledge to ensure that systems comply with military Risk Management Framework (RMF) requirements for system protection and monitoring and IAW with DoDI RMF instruction 8510.01 for DoD Information Technology (IT)
• Responsible for conducting the RMF life cycle to include RMF Continuous Monitoring, CONUS and OCONUS
• Participates in cyber integration and design of AISR system of systems, providing operational and technical guidance based on prior advanced cyber technical experience and training
• Works independently and in designated groups to ensure operational requirements, capabilities, characteristics, and required resources are identified and implemented to accomplish program cyber mission objectives
• Conducts technical assessments of current and future systems to include Assured Compliance Assessment Solution (ACAS) scans and identify system vulnerabilities through DISA-provided assessment tools
• Utilizes experience in SCAP and STIG tool assessment, POA&M generation and eMASS IA system management are required at Classified and Unclassified levels
• Identifies and analyzes AISR system of systems for cyber compliance, vulnerabilities, and functionality while maintaining IT-centric system analysis requirements CONUS and OCONUS
• Ensures defensive and offensive cybersecurity assessment protocols are identified and implemented in a designated cyber laboratory, including DEVSECOPs and RMF continuous monitoring of approved AISR systems
• Travels CONUS and OCONUS for vendor, customer, and key system stakeholder interaction for training, cybersecurity software/hardware development, and vulnerability assessment during the program’s software development lifecycle (SDLC)

Requirements

• 5 years relevant experience with Bachelors in related field
• 3 years relevant experience with Masters in related field
• 0 years experience with PhD or Juris Doctorate in related field
• High School Diploma or equivalent and 9 years relevant experience
• Must meet DoD 8570/8140 Compliance for Information Assurance Technical Level II (IAT Lvl2) or obtain IAT Lvl2 within 6 months of employment
• CompTIA Server+ Certified/ Linux+ Certified (OS Certification)
• Must be willing to travel CONUS and OCONUS
• Knowledge of DOD, DISA, and vendor cyber policy and procedures and tools
• Knowledge of Risk Management Framework (RMF) processes and procedures to include continuous monitoring methodologies within a lab environment

Tech Stack

• Cyber Security
• Linux
• SDLC

Benefits

• best-in-class medical, dental and vision plan choices
• wellness resources
• employee assistance programs
• Savings Plan Options (401(k))
• financial planning tools
• life insurance
• employee discounts
• paid holidays and paid time off
• tuition reimbursement
• early childhood and post-secondary education scholarships