Cyber Security Analyst Level III

Tyto Athene is searching for a Cyber Security Analyst Level III to join our Warner Robins, GA team.  Tyto Cyber Security Analyst is responsible for AFRC/A4 Cybersecurity functions as Chief, Logistics Support Branch authority and focal point responsible for developing and maintaining the HQ AFRC/A4’s local cybersecurity program. 

 

The primary service associated with A&A support is the creation and maintenance of Risk Management Framework (RMF) Authority-To-Operate (ATO) packages (To include annual reviews) to achieve and/or retain an ATO for AFRC/A4 systems. These activities include authoring/reviewing Standard Operating Procedures (SOPs), and Ports, Protocols & Services maintenance.

 

Responsibilities:

Representative systems include:

Major efforts:

• AFRC Basing and Logistics Geospatial Information and Services (AFRC B&L GI&S) - NIPR RMF Package
• AFRC Civil Engineering Planning Tool (CEPT) – NIPR RMF Package
• AFRC Support Agreement Management Tool (SAM) - NIPR RMF Package

Additional services provided will include, but are not limited, to the following:

• Perform ISSM duties as required IAW AFI 17-101, Risk Management Framework (RMF) for Air Force Information Technology (IT) and AFI 17-130, Cybersecurity Program Management.
• Ensure Federal Information Security Management Act (FISMA) compliance requirements are met for the packages. 
• Conduct annual security reviews of all IA controls and a test of selected IA controls IAW AFI 17-101, Risk Management Framework (RMF) for Air Force Information Technology.
• Manage the systems COMPUSEC Program for HQ AFRC/A4
• Address all AF COMPUSEC requirements IAW AFMAN 17-1302-O:
  • Implement and enforce all AF cybersecurity policies, procedures, and countermeasures.
  • Completion/ annual review of SOPs.
• Comply with continuous monitoring – update asset/hardware/software inventory, upload vulnerability scan reports, POAMs, STIG checklists.
• Coordinate/facilitate annual Tabletop or Live Contingency/Incident Response Plan.
• Provide CCRI support services to Vulnerability Management office & CCRI PM. · Monitor STIG compliance and remediation of vulnerabilities.
• Ensure POAMs are being accomplished for those items that are non-compliant.
  • Review POAMs periodically to ensure estimated completion date is met, milestones documented.
• Participate in Change Approval Board for changes to systems. 
• Upload monthly hardware/software asset inventories.
• Provide/upload artifacts required for authority to operate in addition to other A&A requirements, as required in accordance with CDRL A008, ATO/A&A Artifacts, DI-MGMT-82000, PWS Appendix C.
• Provide input to on-site contract manager as required to support deliverables identified in section 2.3.1.

Required:

• Experience working with Risk Management processes and requirements per the Risk Management Framework (RMF)
• Experience processing Risk Management Framework
• Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities.
• Knowledge of server administration and systems engineering theories, concepts, and methods.
• Knowledge of cloud computing service models Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).
• Knowledge of basic system administration, network, and operating system hardening techniques
• Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities.
• Knowledge of cybersecurity principles
• Onsite support, Warner Robins in GA.
• Active 8570 Certification; Comp TIA Level II Security Plus+ certification

Clearance:

• Active DoD Secret level clearance required