Cyber Security Analyst

Position Overview

SRC is searching for a well-rounded Mid-Level Cybersecurity Engineer to test, analyze, evaluate, validate, and verify cybersecurity requirements for Information Technology (IT) systems supporting the installation requirements for United States Space Command (USSPACECOM) command and control facilities. Work supporting USSPACECOM will be conducted at the government's facilities in Colorado Springs, CO.

Key Responsibilities

• Evaluating information systems for compliance with Defense Information Security Agency (DISA) Security Technical Implementation Guideline (STIG) and assessing measures needed to bring systems into compliance.
• Conducting Assured Compliance Assessment Solution (ACAS) scans for STIG compliance checks.
• Reviewing Information Assurance Vulnerability Alerts (IAVA) for applicability and impact on system security.
• Developing and/or updating the Plan of Action and Milestones (POA&M) to document vulnerabilities and mitigate risks.
• Analyzing changes affecting the organization's Authorization to Connect (ATC) risk level and cybersecurity posture and reporting findings.
• Ensuring security design and distribution actions are evaluated, validated, and implemented as required.
• Integrating cybersecurity requirements into the continuity planning for systems and organizations.
• Evaluating development efforts to ensure baseline security safeguards are planned and appropriately installed.
• Identifying alternative information security strategies to address organizational cyber objectives.
• Assisting the command ISSM in preparing and maintaining plans, instructions, guidance, and standard operating procedures related to network systems security operations.
• Reviewing and recommending policy standards and implementation strategies to ensure compliance with cybersecurity policies.
• Developing, updating, and reviewing various security documentation including Security Plans, Implementation Plans, Test Plans, Test Results, POA&M, and Security Assessment Reports (SAR).
• Assessing system compliance against NIST and DoD security requirements, including NIST 800-53 and DISA guidelines.
• Coordinating with other system SMEs to develop authorization boundary diagrams, architecture diagrams, and inventories.

Required Qualifications

• One to two (1-2) years of combined cybersecurity experience in roles such as ISSO, Cybersecurity Analyst, and/or Systems/Network Administrator.
• Two or more (2+) years of experience working with Windows and/or Linux systems administration.
• Bachelor’s degree in Cybersecurity, Engineering, Computer Science, or a related IT field.
• Active DoD 8570 Level II Certification (e.g., Security+ CE, CCNA, etc.).

Preferred Qualifications

• Skilled in the use of Enterprise Mission Assurance Support Service (eMASS).
• Knowledgeable in Supply Chain Cyber Risk Management (SCRM).
• Understanding of cybersecurity principles and DoD requirements regarding confidentiality, integrity, availability, authentication, and non-repudiation.
• Familiarity with IT security principles and methods, such as firewalls, demilitarized zones, encryption, and zero trust architecture.
• Awareness of system and application security threats and vulnerabilities, including buffer overflow, mobile code, cross-site scripting, SQL injections, and other risks.

Benefits & Perks

• Generous benefit package including medical, dental, and vision plans.
• 401(k) with a company match and life insurance.
• Paid time off starting at 10 days of vacation and 5 days of sick leave annually, plus 11 paid holidays.
• Tuition reimbursement and a work environment that encourages excellence.
• For positions requiring a security clearance, selected applicants will undergo a government security investigation and must meet eligibility requirements for access to classified information.