Cybersecurity Analyst III

Responsibilities

OBXtek is seeking a highly experienced Cybersecurity Analyst III to serves as a cybersecurity systems subject matter expert providing technical guidance and information to meet requirements. Works independently with minimal guidance on complex projects and assignments. Tasks require expert level application of established methods, procedures, techniques, criteria, and programs. Responsible for identifying cybersecurity requirements for information systems certification and accreditation. Performs assessment of present levels of cybersecurity, defines acceptable levels of risk, knowledge of proper cybersecurity practices. Identifies potential vulnerabilities to cyber and information security. Knowledge of technologies for network scanning, patching, defense, and response to cyber threats. Plans, coordinates, and conducts reviews, assessments, studies, and projects. Reviews and prepares plans, forms and procedures, reports and related documents. Plans, arranges, manages, and conducts data collection and analysis work in support of cybersecurity assessments. Compiles new information, considers data from a variety of sources, and follows standard approaches, methods, and procedures to plan and carry out assignments. Reviews, conducts and evaluates sampling, surveys, data and findings. Monitors operations to identify and rectify problems. Evaluates adequacy of controls and corrective measures and identifies and make recommendations to higher level employee on determinations of alternate measures. Prepares, coordinates and/or reviews the preparation of written plans, schedules and milestones for accomplishing goals. Participates in meetings regarding cybersecurity concerns related to the assigned projects. Performs collection and assists in compilation of technical and programmatic data from a variety of sources. Coordinates issues pertaining to project compliance, schedule and corrective actions. Monitors budgets, safety requirements and ensures quality is met. May be required to serve as a Combatant Command Liaison Representative in the United States or abroad. Liaison duties would include, but not be limited to: providing direct planning, coordination, Information Assurance, Interoperability, and Mission Assurance assessment and exercise support onsite.

 

Seven (7) or more years of progressively responsible experience in the management of computer networks and information systems. Experience must include five (5) years as a practicing analyst or staff officer responsible for the functional area of cybersecurity and managerial or supervisory experience sufficient to ensure positive direction of subordinates. Experience must demonstrate each of the following:(1) Sufficient familiarity with cybersecurity qualitative and quantitative analysis tools to assess and apply to the solution of problems. (2) Advanced knowledge of cybersecurity policy, defensive cyber operations, and cybersecurity reporting requirements. (3) Familiar with systems integration techniques, system trade-off analysis, and/or program planning.

Qualifications

• Five years of additional experience within the last ten years in any combination in the following areas:
• Experience in assessing cybersecurity and mission assurance at Army, Joint, and Combatant Command exercises including systems and programs listed below, System / Program Names.
• Experience is defined as activities to include exercise planning, assessment execution, data collection during assessment events, data analysis and reporting
• Experience supporting the Office of the Secretary of Defense Director of Test and Evaluation Cybersecurity Assessment Program.
• Experience in the application of Office of the Secretary of Defense Director of Test and Evaluation Cybersecurity Assessment Program assessment methodologies, analysis, evaluation, exercise integration, and reporting phases.
• Experience with both oral and written communication such as briefings, writing technical papers, etc. for cybersecurity systems and programs as specified below, System / Program Names.

SYSTEM/PROGRAM NAMES

• Cyber Readiness Campaigns (CRC)
• Director, Operational Test and Evaluation (DOT&E) Cybersecurity Assessment Program (CAP)
• Secret Internet Protocol Network (SIPRNet)
• Sensitive but Unclassified Internet Protocol Network (NIPRNet)
• Combined Enterprise Regional Information Exchange System (CENTRIXS)
• Mission Partner Environment Networks (MPE)
• Industrial Control Systems (ICS) / Supervisory Control and Data Acquisition (SCADA)
• Global Command and Control System – Army
• Global Command and Control System – Joint
• Link Monitoring and Management Tool (LMMT)
• Advanced Field Artillery Tactical Data System (AFATDS)

Security Clearance

Top Secret with