Intermediate Cyber Security Analyst

ASRC Federal Business Innovation, LLC is a premier provider of systems engineering, software engineering, system integration and project management services for real-time, mission-critical defense systems. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™.

We are seeking a motivated Intermediate Cybersecurity Analyst to provide support for our Secretary of the Air Force / Office of Competitive Activities (SAF/OC) customer. The Cybersecurity Analyst supports cybersecurity requirements to protect US classified systems in foreign partner locations. Some Travel is required.

Responsibilities
• Responsibilities include security documentation preparation, security engineering analysis and document review, security requirements traceability, and system compliance reports as directed by the DoD and MPCO Cybersecurity authorities and the ISSM.
• Participates in activities and supports development of required documentation for initial and subsequent Assessment and Authorization (A&A) activities.
• Supports of the Risk Management Framework (RMF) for DoD IT packages for delivery as prescribed by the DoD MPE Authorizing Official (AO). Populate A&A templates per RMF for DoD IT requirements in support of the ISSM.

Requirements
• Active Top Secret security clearance with SCI Eligibility
• Education: BA/BS or higher
• Ten (10) years’ of Cybersecurity experience. Qualifying experience includes the following activities:
▪ Threat Detection & Monitoring
▪ Analyzing logs and alerts from SIEM (Security Information and Event Management) systems.
▪ Monitoring network traffic for unusual patterns or suspicious activity
▪ Incident Response
▪ Investigating and respond to security breaches in real time.
▪ Assisting in detecting, reporting, and responding to security incidents.
▪ Writing detailed incident reports
▪ Coordinating recovery efforts with Security Operations Centers (SOCs) and other stakeholders
▪ Vulnerability Management
▪ Conducting regular risk assessments and penetration tests.
▪ Identifying and fixing security flaws in systems, applications, and networks.
▪ Security Infrastructure Maintenance
▪ Installing and managing firewalls, antivirus software, and encryption tools.
▪ Ensuring systems are patched and updated to prevent exploitation.
▪ Ensuring systems comply with federal, state, and organizational security requirements
▪ Overseeing ongoing assessment of security controls.
▪ Ensuring timely updates and patches to maintain system integrity
▪ Policy and Compliance
▪ Participates in activities and supports development of required documentation for initial and subsequent Assessment and Authorization (A&A) activities
▪ Developing and enforce security policies and best practices.
▪ Tracking metrics like mean time to detect/respond and patch compliance.
▪ Maintaining System Security Plans (SSPs), Risk Assessments, and Plan of Action and Milestones (POA&Ms).
▪ Documenting security controls and ensuring they’re properly implemented.
▪ Ensuring systems meet standards like NIST, FISMA, FedRAMP, or ISO 27001.
▪ Preparing for and supporting audits and security inspections
▪ Education and Awareness
▪ Training staff on cybersecurity protocols, phishing awareness and best practices
▪ Creating reports for technical and non-technical stakeholders.
▪ Threat Intelligence
▪ Staying updated on emerging threats and attack vectors.
▪ Researching malware, ransomware, and other evolving cyber risk
Schedule
• You can flex time during the 2 week pay cycle - avoid using PTO for appointments

Why ASRC?
As a wholly owned subsidiary of Arctic Slope Regional Corporation, an Alaska Native Corporation, we are inspired by the Iñupiat culture. We embrace stewardship and the idea of using every resource effectively; teamwork when striving to achieve goals and building a collaborative environment; integrity in adhering to high moral principles and professional standards; respect in welcoming and regarding the differing opinions, experiences, rights and traditions of others; accountability in that we meet our commitments and take responsibility for our results; and continuous improvement, always striving to make things better, raising the bar and staying humble.