Cybersecurity Analyst

M9 Solutions is seeking a Cybersecurity Analyst to work on-site in support of a government contract for a client located in Washington, DC. An active Top Secret clearance is required.

Responsibilities

• Researches and enforces technical cybersecurity compliance of government systems.
• Investigates the detailed system attributes of encryption, vulnerability management, multi-factor authentication, and centralized logging and auditing, among other disciplines.
• Provides technical summaries and input on the data.
• Works with the Security Assessment Teams (Red, Blue, Purple, as well as the DCISO/CISO) to perform detailed analysis and identify noncompliant systems and possible vulnerabilities.
• Assists in providing methods to remediate shortcomings to client personnel and other stakeholders both internal and external for affected systems.
• Conducts in-depth technical analysis, confirms compliance information, and maintains a detailed record of all actions taken, evidence, and communications.
• Assists in interpretation and implementation of Federal Government requirements for government systems and coordinates various audits and data calls.
• Analyzes logs to determine anomalous traffic and potential exfiltrated data.
• Maintains working knowledge of current vulnerabilities of systems and how they can be exploited.
• Interprets guidance and technical requirements for implementing security requirements to prevent security breaches and disseminates the guidance in a more readable format to others.
• Ensures that current Federal Government security policies are being followed and all required documentation is provided.
• Responds to incidents when required to assist in detection, isolation, remediation, and investigation of the incident.
• Participates in After Action Reviews (AARs) of incident responses.
• Understands and analyzes threat intelligence data to identify emerging threats and proactively defend against them.
• Assists with vulnerability management notifications from other government agencies and vendors to ensure that required vulnerabilities within identified government systems are remedied within the required timeline and reported accurately.
• Produces, analyzes, and interprets forensically sound images of data and other electronic storage media when required or requested.

Required Skills and Qualifications

• Top Secret security clearance.
• 8+ years of relevant experience.
• Detailed knowledge of federal standards and technologies used in cybersecurity compliance disciplines.

Preferred Skills and Qualifications

• Industry-recognized certifications such as CompTIA CySA+, CompTIA CASP+, CompTIA PenTest+, CompTIA SecurityX, EC-Council Certified Ethical Hacker (C|EH), EC-Council Certified Incident Handler (C|IH), GIAC GPEN, or GIAC GCIH.

GH 1107