Cyber Security Analyst II

Amentum, a global leader in critical mission support, engineering, technology, and national security solutions, is seeking a Cyber Security Analyst II to support a government contract based in El Paso, TX.

PURPOSE AND SCOPE

The Cyber Security Analyst II is responsible for safeguarding organizational information systems, networks, and data through the implementation, monitoring, and continuous improvement of security controls aligned with National Institute of Standards and Technology (NIST) guidance. This role requires a strong working knowledge of NIST cybersecurity standards and publications, with emphasis on applying NIST-based risk management, security control implementation, incident response, and continuous monitoring practices.

PRIMARY RESPONSIBILITIES

Security Operations & Monitoring

• Monitor security alerts, logs, and system activity to detect potential cybersecurity threats or policy violations.
• Analyze security events and vulnerabilities; recommend corrective and preventive actions aligned with NIST guidance.
• Support system hardening and secure configuration baselines in accordance with NIST standards.

NIST Implementation & Compliance

• Implement, assess, and maintain security controls based on NIST Special Publications.
• Support NIST-based risk management activities, including system categorization, control selection, assessment, authorization support, and continuous monitoring.
• Maintain documentation demonstrating compliance with NIST security requirements.
• Assist in the development and maintenance of System Security Plans (SSPs), risk assessments, and Plans of Action and Milestones (POA&Ms) aligned to NIST standards.

Incident Response

• Participate in cybersecurity incident response activities using NIST-recommended incident handling practices or incident handling as defined by the USG.
• Assist with containment, eradication, recovery, and post-incident analysis.
• Document incidents, response actions, and lessons learned in accordance with NIST guidance.

Risk & Vulnerability Management

• Identify, analyze, and track cybersecurity risks in alignment with NIST risk management principles.
• Support vulnerability scanning, assessment, and remediation tracking consistent with NIST recommendations.
• Assist with risk acceptance and residual risk documentation.

Policy, Procedures & Awareness

• Develop, review, and update cybersecurity policies, procedures, and standard operating procedures aligned with NIST publications.
• Support security awareness activities to reinforce NIST-based cybersecurity best practices across the organization.
• Ensure cybersecurity documentation remains current with evolving NIST standards.

Minimum Requirements:

• Two (2) to five (5) years of experience in cybersecurity or information security.
• Demonstrated working knowledge of NIST cybersecurity standards and Special Publications.
• Experience analyzing logs, alerts, and vulnerability data.
• Understanding of network, system, and application security principles.
• Strong documentation, analytical, and communication skills.
• Must be able to obtain and maintain facility credentials/authorization. Note: US Citizenship is required for facility credentials/authorization at this work location.

Preferred Qualifications

• Experience supporting environments that require strict adherence to NIST standards.
• Hands-on experience supporting system authorization, assessments, or continuous monitoring activities aligned with NIST.
• Cybersecurity certifications aligned with NIST principles (e.g., Security+, CySA+, CISSP, or equivalent).

EDUCATION

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, in an associated discipline preferred; two (2) years of experience in related field may be substituted for each year of the four (4) years of college.

Key Competencies

• Risk-based cybersecurity analysis
• Attention to detail and compliance documentation
• Practical application of NIST standards
• Collaboration across technical and non-technical teams
• Continuous improvement and security maturity enhancement

WORK ENVIRONMENT, PHYSICAL DEMANDS, AND MENTAL DEMANDS

• May require participation in on-call or cybersecurity incident response activities.
• Work involves access to sensitive systems and data.
• Strict adherence to organizational cybersecurity policies and NIST-al