Назад
Company hidden
6 дней назад

Cybersecurity Technology Management Analyst

120 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cybersecurity Technology Management Analyst (DoD/RMF): Supporting cybersecurity engineering, information assurance, security authorization, and Risk Management Framework activities for a defense agency network infrastructure with an accent on enterprise security controls, compliance, and authorization documentation. Focus on assessing vulnerabilities, validating DISA STIG requirements, maintaining eMASS artifacts and POA&Ms, and coordinating network security changes with government and engineering teams.

Location: Primarily onsite at a contractor-owned facility near Fort Belvoir, Virginia, and customer locations; candidates must work onsite or reside within commuting distance of Fort Belvoir, VA, Battle Creek, MI, Columbus, OH, Dayton, OH, New Cumberland, PA, Ogden, UT, Philadelphia, PA, Richmond, VA, Anniston, AL, San Diego, CA, Fort Bragg, NC, Robins AFB, GA, or Tobyhanna, PA. Fort Belvoir is highly preferred.

Salary: $120,000+ annually.

Company

Technology and professional services organization providing consulting, advanced technology solutions, and essential services to U.S. government, defense, and intelligence agencies.

What you will do

  • Provide information assurance, cybersecurity engineering, and enterprise network security expertise for a Department of Defense agency.
  • Support Risk Management Framework activities, security authorization, continuous compliance monitoring, annual assessments, and control validation.
  • Develop, review, and maintain cybersecurity documentation, RMF artifacts, authorization packages, network connection documentation, memoranda of agreement, and system interconnection records in eMASS.
  • Assess cybersecurity risks, vulnerabilities, network changes, technology refreshes, equipment changes, and new system integrations; recommend mitigation measures.
  • Support enterprise boundary defense, access control, DISA STIG implementation, Authority to Operate and Authority to Connect requirements, and POA&M management.
  • Coordinate cybersecurity compliance with government security personnel, network engineers, operational teams, Technical Review Boards, and Change Control Boards.

Requirements

  • At least five years of relevant experience, including Certification and Accreditation experience.
  • Ten years of practical industry, government, and/or consulting experience in information technology management.
  • IT project management experience using Microsoft tools, plus knowledge and experience managing IT services and strategies.
  • Proficiency with Microsoft Excel, Access, Word, PowerPoint, and SharePoint.
  • High school diploma.
  • U.S. citizenship is required.
  • Secret clearance with a Tier 3/NACLC/ANACI investigation.
  • DoD 8570/8140 IAM Level III baseline certification: CISM, CISSP, or GSLC.
  • Cisco Certified Network Associate certification.
  • Ability to work extended hours at a computer in an office environment.

Nice to have

  • Ten years of relevant Certification and Accreditation experience.
  • NIST Certification and Accreditation experience.
  • Department of War information assurance experience.

Culture & Benefits

  • 26 days of paid leave covering vacation, sick, personal time, and holidays.
  • Performance bonuses based on individual contributions and company-wide results.
  • 401(k) with a 3% company match and immediate vesting.
  • Company-paid life insurance up to $300,000, medical, dental, vision, FSA, and HSA options.
  • 15 days of fully paid parental leave and military differential pay.
  • Paid training and certifications, tuition reimbursement, and professional development support.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →