Lead Cyber Analyst

General Summary:
Performs cyber policy, system monitoring, and analysis support and provides recommendations on how to reduce cyber risks. Responsible for serving as the Cyber Lead Information Systems Security Officer (ISSO) for systems assigned.

Principal Duties and Responsibilities (*Essential Functions):

• Develops and manages Risk Management Framework (RMF) Assessment and Authorization documentation, standard operating procedures, policies, and security instructions for both networked and stand-alone computer systems and provides oversight and guidance for multiple systems.
• Supports the Cyber Security Program to include, but not limited to, Cyber Security policy, procedures, and regulations to assist with identifying potential Cyber Security issues.
• Monitors, evaluates, and maintains systems and procedures to safeguard information systems, networks, and databases.
• Implements, enforces, communicates, and develops security policies or plans for data, software applications, hardware, telecommunications, and information systems security education/ awareness programs.
• Establishes and satisfies system-wide information security requirements based upon the analysis of user, policy, regulatory, and resource demands.
• Provides network and security operations technical analysis, assessment, and recommendations.
• Identifies where systems/networks deviate from acceptable configurations, enclave policy, or local policy.
• Conducts audits to ensure information systems security policies and procedures are implemented as defined in security plans and best practices.
• Performs detailed analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Establishes strict program control processes and policies to ensure mitigation of risks and supports obtaining certification and accreditation of systems.
• Supports the formal testing requirements through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
• Performs evaluations (compliance audits) and/or active evaluations (vulnerability assessments).
• Provides leadership and threat mitigation training techniques to other team members.
• Leads response teams to ensure any anomalies are corrected in accordance with government or industry standards.

At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here.

• Bachelor’s Degree or higher in technical field
• Minimum of 12 plus years of work-related experience
• Currently active CISSP certification
• Currently active DoD SECRET security clearance; US Citizenship required
• Experience determining and assessing vulnerabilities including planning, testing, and documenting (DoD) accreditation packages for Information Technology (IT) systems and networks, specifically within RMF
• Working knowledge of eMASS, ACAS, DISA STIGS, and STIG-Tools
• Strong written and verbal communication skills
• Must have good interpersonal skills and the ability to adapt to a dynamic customer-oriented environment

Preferred Qualifications

• TOP SECRET with SCI Eligibility
• Project Management Experience
• Experience with AMCOM CIO/G6 Office

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.