Due Diligence Cyber Security Analyst
Progressive Drilling Concepts LLC
AWSAzureCloudCyber Security
IT Security Analyst
Spry Methods, Inc.
full-time
Posted on:
Location Type: Hybrid
Location: Herndon • Virginia • 🇺🇸 United States
Visit company websiteJob Level
Mid-LevelSenior
Tech Stack
CloudCyber SecuritySplunk
About the role
- Understand/document information system specifications and security controls, including logical and physical diagrams, connectivity, communication, and data flow diagrams
- Advise stakeholders on multiple courses of action in an environment with changing unconfirmed policy, e.g., NIST RMF and DISA SRG
- Document multiple courses of action and identify risk mitigation recommendations in accordance with FedRAMP requirements, SAP NS2 policy, procedures, and best practices
- Apply enterprise security frameworks and capabilities, such as FISMA, NIST SP 800, etc.
- Develop/update policies and procedures to implement FedRAMP compliance as well as compliant with NIST 800-171 security requirements and other DFAR clauses
- Understand enterprise operating environments, including security posture, application environment, and associated security controls
- Demonstrate familiarity with current FedRAMP, DOD and NIST Security controls and technologies, including vulnerability management capabilities
- Identify and assess Cloud System state, including vulnerabilities, RMF package status/accreditation model, PPS compliance, and patching/CSVA mechanisms
Requirements
- Must be a US Citizen
- Demonstrated knowledge and the ability to analyze systems for Cybersecurity compliance
- Ability to work in fast-paced, team-oriented environment
- Knowledge of various security scanning tools (Such as NESSUS, Splunk or Application scanning)
- Knowledge of Federal and DoD policies and risk assessment methodologies, including FedRAMP
- Experience in writing or executing system security documentation, authorization to operate packages, POA&Ms, and policies
- Experience in reviewing/editing/writing technical documents
- Presentation and public speaking skills required
- Knowledge of DISA STIGs and SRGs, Committee for National Security Systems Instructions and NIST Risk Management Framework
- Knowledge and understanding of systems and networking technologies and concepts
- Ability to interpret and assess network diagrams and drawings using Visio
- Familiarity with Testing, Development, Staging, and pre-production environment requiring cyber security support
- Knowledge of Privacy Act
- Bachelor’s degree in computer information systems or math/sciences
Benefits
- Health insurance
- Hybrid work arrangements
- Professional development opportunities
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
Cybersecurity compliance analysisSecurity documentation writingRisk assessment methodologiesVulnerability managementFedRAMP complianceNIST SP 800NIST 800-171DISA STIGsNetwork diagram interpretationCloud System vulnerability assessment
Soft skills
Team-orientedPresentation skillsPublic speakingAnalytical skillsAdaptability
