Назад
Company hidden
7 дней назад

Cybersecurity Analyst

Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/

TL;DR

Cybersecurity Analyst (DoD RMF): Support ISSM in developing and managing cybersecurity documentation for pharmacy systems with an accent on compliance, ATO achievement, and vulnerability remediation. Focus on analyzing scans from ACAS, HBSS, SCAP, reviewing STIGs, and maintaining secure system lifecycle through POA&M and configuration assessments.

Location: Remote (US, Active Public Trust clearance required). Private secure high-efficiency home internet and telecommunications access required.

Company

Contractor providing program management and administrative support to the Defense Health Agency (DHA) Pharmacy Operations Division, managing TRICARE Pharmacy Benefits Program for 9.6 million beneficiaries.

What you will do

  • Assist ISSM with cybersecurity documentation including System Authorization Plans, POA&M, hardware/software lists, and boundary diagrams to achieve ATO.
  • Ensure compliance with DoD 8582.01 controls throughout system lifecycle.
  • Validate hardware/software lists, architecture diagrams, and resolve findings via remediation in POA&M.
  • Assess configuration changes for impact on security posture.
  • Analyze vulnerability scans from ACAS, HBSS, SCAP Nessus, review STIGs and checklists for system-level assessments.
  • Use eMass and SMRS for documentation and evidence of assessment results.
  • Establish hardware lifecycle and software license management processes.
  • Develop threat-based defenses and efficient cybersecurity operations.

Requirements

  • Active Public Trust clearance
  • Bachelor’s Degree or 8+ years cybersecurity experience
  • CompTIA Security+ and DoD IAT Level III certification (e.g., CISSP, CISA, CASP CE)
  • 8+ years cybersecurity experience, including federal security laws/policies
  • Technical knowledge of NIST, RMF, FedRAMP, cloud security, IP networking, encryption, firewalls, etc.
  • Depth knowledge of HBSS, ACAS, SCAP for hardening, assessment, and reporting

Nice to have

  • Excellent written and oral communication skills
  • Proficient in Microsoft Office Suite (Excel, Outlook, PowerPoint, Word, Visio)

Culture & Benefits

  • Standard Monday-Friday day schedule, with possible travel/weekends/extended hours if approved
  • Remote work in private suitable location with secure high-efficiency internet/telecom

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →