Cybersecurity Analyst

Company Overview:

Full Spectrum Operations LLC (FSO) is a SDVOSB JV between American Communication Solutions LLC, an SBA VetCert verified SDVOSB, and By Light Professional IT Services LLC (By Light). FSO is looking for personnel to support the Regional Network Enterprise Center (RNEC) Joint Base Langley-Eustis (JBLE), Virginia, Local Network Enterprise Center (LNEC) Fort Gregg-Adams, Virginia, and Joint Expeditionary Base Little Creek Fort Story (JEBLCFS), Virginia, with classified and unclassified communication systems support.

Work is on site and core duty hours are 0700 – 1700, Monday through Friday, excluding Federal holidays. All personnel will work an 8-hour workday.

Responsibilities:

• Analyze general information assurance–related technical problems and provide resolutions in solving these problems.
• Support the Government Capability Manager/Information System Owner (ISO) in ensuring that the information systems are configured IAW DISA Security Technical Implementation Guides (STIGs), applicable patches and other cybersecurity requirements.
• Support the Government in following the DoD cybersecurity policy requirements set forth in DoDI 8500.01, “Cybersecurity,” and DoDI 8510.01, “Risk Management Framework (RMF) for DoD Information Technology (IT)” and their successors.
• Provide support for the independent assessment of compliance of information systems with DoD RMF standards using DoDI 8510.01.
• Comply with the practices identified in the Risk Management Framework (RMF) Knowledge Service.
• Review and ensure that any RMF activities on behalf of the RNEC/LNEC adhere to the operational Tactics, Techniques and Procedures (TTPs) and Operations Orders (OPORDs) that are hosted on the U.S. Army Component Workspace – Operations tab of the RMF Knowledge Service.
• Provide technical input on RMF Assess Only submissions.
• Provide input to the Enterprise Mission Assurance Support Service (eMASS) to record RMF activities such as control implementation of all applicable Security Controls as identified via information system security categorization IAW NIST SP 800-53 and CNSSI 1253 (security controls are broken down into individual, measurable, statements called assessment procedures or Control Correlation Indicators (CCIs)) IAW DoDI 8510.01 (Risk Management Framework (RMF) for DoD Information Technology (IT)).
• Perform other duties as required.

Required Experience/Qualifications:

• Education: Possess an associate’s degree or higher.
• Foundational Personnel Certification: CompTIA Security+ or Certified Ethical Hacker (CEH) or CyberSec First Responder (CFR) or CompTIA Cloud+ or Global Industrial Cyber Security Professional (GICSP) or Systems Security Certified Practitioner (SSCP) or GIAC Security Essentials Certification (GSEC).
• Foundational Qualification (Experience) – Possess an Intermediate Proficiency level with 70% of the KSA associated with the DCWF workforce role – Systems Administrator – Work Role ID: 451.
• Residential Qualification (Certifications) – Microsoft Security Engineer Associate.
• Residential Qualification (On-the-Job) – RMF, EMASS, and ACAS.
• Minimum of three years’ experience supporting DoD cybersecurity policy requirements and RMF activities.
• Extensive experience with DoD security hardening, collection and assessment tools (STIGs, ACAS, SCAP, Nessus, etc.).
• Experience with security architectures, firewalls and network access.
• Fluent in the spoken and written English language, to include the usage of technical terms commonly used in information technology (IT), network routing and switching, telecommunications, IT maintenance, and technical control facilities.

Preferred Experience/Qualifications:

• Supported the U.S. Army or other DoD Agency.
• Has the communication skills to effectively interface with senior military officials, managers, and subordinates.

Special Requirements/Security Clearance:

• Security Clearance: Secret