Cybersecurity Analyst
Location: Kansas City, Missouri; Quantico VA
Overview:
We are seeking a Cybersecurity Analyst to:
- Support US Marine Corps (USMC) enterprise-level hybrid cloud data center operations
- Enable USMC world-wide customers to execute critical missions
What you will do:
As a Cybersecurity Analyst, you will work with a team responsible for all aspects of cybersecurity support to the hybrid-cloud enterprise hosting environment. You will support ATO package development, maintenance and management for the data-center and conduct the continuous monitoring program supporting data-center operations. You will also participate in vulnerability analysis and self- assessment technical analysis, monitor and report compliance status, and support plan of action and milestone (POA&M) for known security vulnerabilities. You will support 2 ISSM and an ISSO.
Responsibilities include:
- Developing, maintaining, editing, authoring, and supporting accreditation package requirements including use of USMC's accreditation tool – MCCAST
- Supporting accreditation activities for installed and in-deployment infrastructure as well as requirements in development and engineering change proposal/pipeline processes such as developing supporting documentation and completing cybersecurity compliance requirements
- Developing POA&M for identified vulnerabilities and developing remediation, mitigation and criticality downgrade strategies
- Coordinating with independent verification and validation team and program office ISSM cybersecurity support to enable overall cybersecurity program activities
- Coordinating and collaborating with operations teams to identify solutions for vulnerability mitigation and preparing cybersecurity documentation to obtain support and approval to operate
- Providing technical and authorization and accreditation support
- Conducting vulnerability management assessments using ACAS (Tenable Nessus) and other tools including mitigation development and POA&M and documentation support
- Preparing systems for review and independent verification and validation (self-assessments)