Cybersecurity Analyst

Koniag IT Systems, a Koniag Government Services company, is seeking a Cybersecurity Analyst with a TS/SCI clearance to support KITS and our government customer in Falls Church, VA.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Essential Functions, Responsibilities & Duties may include, but are not limited to:
• Collaborate with solution experts to design, build, and deploy secure solutions aligned with DoD cybersecurity regulations and mission requirements.
• Design, build, and deploy automation workflows to scale vulnerability discovery efforts across thousands of microservices, reducing manual security bottlenecks.
• Identify security-sensitive functionality in applications and services lacking security coverage and implement automation to ensure continuous security awareness.
• Research, identify, and document novel attack vectors and security weaknesses in DoD-owned and contractor-managed assets; develop state-of-the-art automation to detect and mitigate them.
• Identify gaps in systems lacking proper security scans; design and execute a roadmap for 100% coverage across all assigned assets and services.
• Perform threat modeling, design reviews, and code reviews to assess security implications for new systems and technologies; recommend secure-by-design solutions.
• Conduct risk assessments, audits, and penetration testing to ensure proper functioning of information systems, data processing, and cybersecurity measures.
• Collaborate with users and program teams to assess data access needs, identify potential security violations, and recommend technical or process improvements.
• Investigate and review security procedure violations; provide training and awareness to prevent recurrence.
• Safeguard systems and networks by training users, promoting security awareness, and ensuring compliance with DoD cybersecurity policies.
• Modify or configure security files, policies, and applications as needed to allow specialized access, correct errors, or integrate new systems securely.
• Prepare, manage, and oversee responses to security data calls, incidents, and compliance inquiries.
• Stay current with DoD directives, cybersecurity trends, tools, and Zero Trust initiatives; proactively apply lessons learned to strengthen organizational security posture.
• Identify and recommend updates to security policies, procedures, and safeguards to mitigate risks and ensure compliance with DoD 8140, NIST RMF, DoDI 8500.01, DoDI 8510.01, CDM, and ZTA.
• Utilize and maintain proficiency with a broad array of security applications and tools, including SIEM, SOAR, endpoint protection, vulnerability scanners, and encryption solutions.
• Perform other related cybersecurity and risk management duties as assigned in support of CDAO’s Sensitive Decision Support (SDS) mission.
Education, Work Experience, Knowledge, Skills & Abilities:
Education/Experience:
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related discipline (or equivalent professional experience).
• 2+ years’ experience working in the IT, Information Security, and/or Cybersecurity fields, preferably in support of DoD or federal systems.
• Experience supporting Cisco enterprise security technologies and implementing enterprise-level security solutions.

Knowledge & Skills:
• Strong understanding of DoD cybersecurity regulations and frameworks, including DoD 8140/8570, Risk Management Framework (RMF), Zero Trust Architecture (ZTA), and Continuous Diagnostics and Monitoring (CDM).
• Knowledge of core security concepts: access control, identity and authentication, defense-in-depth, intrusion detection, encryption, vulnerability management, and incident response.
• Familiarity with Security Information and Event Management (SIEM) platforms, Security Orchestration, Automation, and Response (SOAR) tools, and cloud security solutions.
• Prior experience with security assessments, bug bounty programs, or penetration testing highly desirable.
• Strong problem-solving and analytical skills, with the ability to troubleshoot complex security issues and recommend solutions.
• Proficiency with a wide range of security applications, automation frameworks, and monitoring tools.

Abilities:
• Ability to work independently or as part of a multi-disciplinary cybersecurity team in a fast-paced environment.
• Exceptional attention to detail with strong organizational and documentation skills.
• Excellent written and verbal communication skills, with the ability to brief technical and non-technical audiences, including senior leadershi