cybersecurity analyst

Metrostar Systems

<div>As Cybersecurity Analyst, you'll support the Marine Depot Maintenance Command (MDMC) Digital Depot Support initiative by protecting information systems, applications, and data environments used to support depot maintenance modernization, logistics systems integration, and analytics platforms. This role ensures that all digital systems and applications comply with Department of Defense cybersecurity policies, CMMC requirements, and federal information assurance standards.

We know that you can't have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.

If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!

What you'll do: 

<ul>
<li>Monitor and analyze system activity to identify cybersecurity threats, vulnerabilities, and anomalies.</li>
<li>Implement and maintain security controls aligned with DoD cybersecurity frameworks and policies.</li>
<li>Conduct vulnerability assessments and support remediation activities.</li>
<li>Support system authorization processes including RMF documentation and security control validation.</li>
<li>Collaborate with development teams to ensure applications are developed in accordance with secure coding practices.</li>
<li>Support incident response activities including investigation, containment, and reporting.</li>
<li>Maintain cybersecurity documentation including system security plans, risk assessments, and compliance artifacts. Assist in implementing DevSecOps practices within application and data environments.</li></ul> 
What you'll need to succeed:
<ul>
<li>Ability to obtain or maintain a Secret Security Clearance</li>
<li>Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related technical fields.</li>
<li>2-4 years of relevant experience</li>
<li>Experience supporting Marine Corps or Department of Defense programs.</li>
<li>Experience with DevSecOps pipelines and secure software development practices.</li>
<li>Experience supporting cloud-based environments (Azure or AWS).</li>
<li>Familiarity with enterprise application security and data protection.</li>
</ul>
Salary Range: $110,000 &ndash; $138,000 


The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including:
<ul>
<li>The candidate's professional background and relevant work experience</li>
<li>The specific responsibilities of the role and organizational needs</li>
<li>Internal equity and alignment with current team compensation</li>
<li>This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:</li>
<li><ul><li>Performance-based bonuses</li>
<li>Company-paid training and/or certifications</li>
<li>Referral bonuses</li></ul></li></ul> 

<div>To apply for this position, please submit your resume via the form below or through our careers page: https://www.metrostar.com/jobs/

Application Deadline: Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration.

Additional Compensation: This role may also be eligible for bonuses and/or additional incentives based on individual and company performance.

Benefits: All full-time employees are eligible to participate in our benefits programs:
<ul>
<li>Health, dental, and vision insurance</li>
<li>401(k) retirement plan with company match</li>
<li>Paid time off (PTO) and holidays</li>
<li>Parental Leave and dependent care</li>
<li>Flexible work arrangements</li>
<li>Professional development opportunities</li>
<li>Employee assistance and wellness programs</li>
</ul>
Like we said, we are big fans of our people. That's why we offer a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades.

Commitment to Non-Discrimination 
All qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.

 What we want you to know:

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

 Not ready to apply now?

Sign up to join our newsletter here.</div></div>

Cybersecurity Analyst (5690)

Ellumen, Inc

<div>Cybersecurity Analyst
 
Position Overview
 
Ellumen is seeking a Cybersecurity Analyst to support cybersecurity and Risk Management Framework (RMF) activities for Defense Health Agency (DHA) systems and applications. The successful candidate will serve as a key liaison supporting Information System Security Managers (ISSMs), system stakeholders, and site personnel to ensure the security, compliance, and operational integrity of DHA environments.
 
This role requires expertise in RMF, cybersecurity compliance, continuous monitoring, and accreditation activities across enterprise systems and networks. The Cybersecurity Analyst will evaluate security controls, assess risks, support authorization activities, and provide recommendations to strengthen the security posture of DHA systems, including local and wide area networks, workstations, network devices, and end-user devices.
 
Key Responsibilities
<ul><li>Support all phases of the Risk Management Framework (RMF) lifecycle, including system authorization, continuous monitoring, and accreditation activities.
</li><li>Develop, implement, and maintain cybersecurity programs, policies, procedures, and security requirements at the organizational and system levels.
</li><li>Manage and maintain cybersecurity documentation repositories, including eMASS and related compliance artifacts.
</li><li>Coordinate cybersecurity inspections, assessments, audits, testing activities, and continuous monitoring efforts with internal and external stakeholders.
</li><li>Provide technical cybersecurity guidance and advisory support to ISSMs, site personnel, and program stakeholders.
</li><li>Review security requirements and provide recommendations to project teams and system owners.
</li><li>Analyze, review, and provide input on Plans of Action and Milestones (POA&amp;Ms) to support risk mitigation efforts.
</li><li>Support the development and implementation of Cybersecurity Control Correlation Identifier (CCI) metrics, policies, and procedures.
</li><li>Monitor compliance with DHA and Department of Defense cybersecurity policies, standards, and regulations.
</li><li>Identify, document, and report cybersecurity incidents through appropriate reporting channels.
</li><li>Provide guidance regarding CMRS tagging, TASKORD requirements, and Information Assurance Vulnerability Management (IAVM) compliance.
</li><li>Conduct cybersecurity risk assessments and provide analysis, recommendations, and strategic guidance to Government leadership.
</li><li>Collaborate with cross-functional teams to support secure system operations and maintain authorization compliance.
</li><li>Perform additional cybersecurity and compliance-related duties as assigned.
</li></ul>Required Qualifications
<ul><li>Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. Equivalent combination of education and experience may be considered.
</li><li>Minimum of 5 years of experience supporting RMF processes within Department of Defense (DoD) or DHA environments, or equivalent relevant experience.
</li><li>Minimum of 5 years of experience supporting DHA systems, programs, or healthcare IT environments, or equivalent relevant experience.
</li><li>Active Secret Security Clearance (required).
</li><li>Strong knowledge of:
<ul><li>DoD Risk Management Framework (RMF)
</li><li>NIST 800-53 security controls
</li><li>eMASS
</li><li>Continuous Monitoring (ConMon)
</li><li>Security Control Assessments (SCAs)
</li><li>Vulnerability management and compliance reporting
</li><li>POA&amp;M development and management
</li><li>IAVM requirements and remediation processes
</li></ul></li></ul>Certifications
 
Candidates must meet DoD 8570/8140 requirements for IAM Level I certification and possess one of the following certifications (or equivalent):
<ul><li>CompTIA Security+ CE (minimum requirement)
</li><li>CAP
</li><li>GSLC
</li><li>Other DoD-approved IAM Level I certifications
</li></ul>For additional certification requirements, refer to the DoD Approved Baseline Certifications guidance.
 
Preferred Qualifications
<ul><li>Experience supporting Defense Health Agency (DHA) enterprise environments.
</li><li>Familiarity with military healthcare systems and federal cybersecurity compliance requirements.
</li><li>Experience working directly with ISSMs, Authorizing Officials (AOs), and Security Control Assessors (SCAs).
</li><li>Strong written and verbal communication skills with the ability to present technical findings to both technical and non-technical audiences.
</li><li>Ability to manage multiple priorities in a fast-paced federal environment.
</li></ul>Clearance Requirement
Active Secret Security Clearance required. 
<ul><li>
</li></ul> 
 
We are committed to fostering an inclusive and professional work environment. As an equal opportunity employer, we consider all qualified applicants for employment without regard to legally protected characteristics. We offer comprehensive healthcare benefits, which will be discussed in detail prior to your first interview.</div>

Cybersecurity Analyst

Phoenix Cyber

<div>Phoenix Cyber is looking for a Cybersecurity Policy Analyst to support a government client. T
Job Responsibilities:
<ul><li>Reviews, consolidates and develops cybersecurity policy in accordance with agency requirements.
</li><li>Fully versed in general tenets supporting the overall DOD implementation of cybersecurity policies, procedures and processes to ensure a balance of security and operational requirements.
</li><li>Required to brief senior management on cybersecurity policy chances, updates and progress.</li></ul>
Minimum Experience:<ul><li>
Seven (7) years of relevant cybersecurity policy experience</li></ul>
Required Skills:<ul><li>
Must possess DOD Secret Clearance</li><li>
Category IAM Level III</li></ul>
Phoenix Cyber is a national provider of cybersecurity engineering services, operations services, sustainment services and managed security services to organizations determined to strengthen their security posture and enhance the processes and technology used by their security operations team.
Phoenix Cyber is an equal opportunity employer and complies with Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veteran's Readjustment Assistance Act (VEVRAA), all amendments to these regulations, and applicable executive orders, federal, and state regulations. Applicants are considered without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, and/or veteran status.
Phoenix Cyber participates in E-Verify to confirm the employment eligibility of all newly-hired employees. To learn more about E-Verify, including your rights and responsibilities, go to https://www.e-verify.gov/
PPXpGClbJb</div>

Cybersecurity Policy Analyst [JOB ID: 20260612]

Bowhead

<div>Overview:

CLOUD ACCELERATION SERVICES AND CYBERSECURITY BUSINESS ENTERPRISE SYSTEMS (CASBES): 
Bowhead seeks individuals to network with, in effort to support the Cloud Acceleration Services (CAS) and Cybersecurity Business Enterprise Systems contract located in Montgomery, AL. The mission of this contract is to provide comprehensive cloud and cybersecurity services to modernize, standardize, secure and enhance its information technology (IT) infrastructure, platforms, and mission applications.
Responsibilities:

Positions available include: 
<ul><li>
Senior Cloud Engineer</li><li>
Cloud Migration Engineer</li><li>
Cloud Operations Engineer</li><li>
Information System Security Officer (ISSO)</li><li>
Security Control Assessor Representative (SCAR)</li><li>
RMF Analyst</li><li>
Cybersecurity Analyst</li><li>
Vulnerability Management Analyst</li><li>
Identity and Access Management (IAM) Engineer</li><li>
DevSecOps Engineer</li><li>
Software Developer III</li><li>
Software Developer II</li><li>
Platform Engineer</li><li>
Database Administrator</li><li>
Data Migration Specialist</li><li>
Quality Assurance/Test Lead</li><li>
Test Automation Engineer</li><li>
Agile Scrum Master</li><li>
Technical Writer</li><li>
Training Specialist</li></ul>
Qualifications:
<ul><li>Required education, years of experience, and certifications will vary based on position requirements</li><li>
Intermediate to advanced level skills in networking and systems administration with Windows and/or Linux environments</li><li>
Intermediate to advanced level skills with any of the following Cisco, Juniper, Palo Alto products</li><li>
Experience using scanning tools such as HBSS, NESSUS, Nmap, Splunk, Elastic</li><li>
Experience working with SDREN or DREN networks preferred</li><li>
Ability to communicate effectively</li><li>
Strong interpersonal skills and good judgment with the ability to work alone or as part of a team</li></ul> 
Physical Demands: 
<ul><li>
Must be able to lift up to 20 pounds</li><li>
Must be able to stand and walk for prolonged amounts of time</li><li>
Must be able to twist, bend and squat periodically</li></ul> 
SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Secret level. US Citizenship is a requirement for Secret clearance at this location.</div>

Cloud Acceleration Services and Cybersecurity Business Enterprise Systems

TekSynap

<div>
 
 Responsibilities
 
 
 
 
 Responsibilities &amp; Qualifications
 
 
 
 <ul>
 <li>
 Assists with Certification &amp; Accreditation (C&amp;A), Authorization to Operate (ATO), and security authorization activities for DoW information systems.
 </li>
 <li>
 Provides administrative and technical support to the ISSM in conducting risk assessments, implementing security controls, and developing cybersecurity policies, procedures, and security plans.
 </li>
 <li>
 Assess cybersecurity documentation and authorization artifacts, including SSPs, POA&amp;Ms, Security Assessment Reports, Risk Assessments, Contingency Plans, Incident Response Plans, Configuration Management Plans, and supporting RMF documentation.
 </li>
 <li>
 Supports continuous monitoring activities and validates compliance with FISMA, RMF, and organizational cybersecurity requirements.
 </li>
 <li>
 Provides guidance and support in the development and maintenance of system authorization packages, hardware and software inventories, boundary diagrams, and other compliance documentation.
 </li>
 <li>
 Coordinates with system owners, ISSMs, ISSOs, Engineers, and Cyber Security stakeholders to support compliance requirements, remediation efforts, and authorization activities.
 </li>
 <li>
 Analyze cybersecurity risks, vulnerabilities, and compliance gaps and provide recommendations for remediation, risk mitigation, and risk acceptance strategies.
 </li>
 <li>
 Provides cybersecurity guidance and support to project teams and stakeholders to ensure security requirements are integrated into project planning and execution.
 </li>
 <li>
 Review and validate RMF artifacts for completeness, accuracy, and compliance prior to submission to Authorizing Officials (AO), Security Control Assessors (SCA), and cybersecurity review boards.
 </li>
 <li>
 Facilitate package reviews and coordinate cybersecurity approval activities through applicable governance boards, change control processes, and authorization decision points.
 
 
 </li>
 </ul>
 
 Required Qualifications
 
 
 
 <ul>
 <li>
 5 years&rsquo; experience in RMF with Army or other DoW Organizations with emphasis on analyzing and accessing ATO packages.
 </li>
 <li>
 Knowledge of Department of War (DoW) policies, directives, and regulatory guidance in the cybersecurity field.
 </li>
 <li>
 Working knowledge of eMASS and DoW workflow tools.
 </li>
 <li>
 Knowledge and experience with technologies such as cloud computing environments, cybersecurity infrastructure, forensic analytics, and DoW Public Key Infrastructure.
 </li>
 <li>
 Demonstrated experience coordinating cross-functional teams consisting of cybersecurity engineers, system administrators, developers, and government stakeholders.
 </li>
 <li>
 Demonstrated experience managing multiple concurrent ATO packages and deliverables.
 </li>
 <li>
 Demonstrated ability to identify, track, and communicate ATO risks, issues, dependencies, and mitigation activities.
 </li>
 <li>
 Demonstrated experience preparing and presenting project status updates for ATO packages and performance metrics to senior leadership and government customers.
 </li>
 <li>
 Knowledge of DoW hosting environments, including cloud, on-premises, and hybrid architectures.
 
 
 </li>
 </ul>
 
 Required Certification
 
 
 
 <ul>
 <li>
 DoW 8570/8140 IAT Level III Baseline Certification.
 </li>
 <ul>
 <li>
 Certified Information Systems Security Professional (CISSP) or equivalant
 
 </li>
 </ul>
 </ul>
 
 Desired Qualifications
 
 
 
 <ul>
 <li>
 Experience developing and reviewing ATO packages and RMF documentation.
 </li>
 <li>
 Familiarity with vulnerability management, continuous monitoring, security control assessments, and POA&amp;M management.
 </li>
 <li>
 Strong written and verbal communication skills with experience producing cybersecurity documentation and executive-level reports.
 </li>
 <li>
 Demonstrated ability to translate security policies, implementation guidance, and requirements into effective cybersecurity engineering solutions.
 </li>
 <li>
 Experience with government or military setting with an emphasis on cybersecurity and compliance projects.
 
 
 </li>
 </ul>
 
 Overview
 
 
 
 We are seeking a Cybersecurity Analyst to support Risk Management Framework (RMF) activities and security authorization efforts for Department of War (DoW) information systems. This role is responsible for assessing and reviewing Authorization to Operate (ATO) packages, evaluating cybersecurity documentation, and supporting compliance with RMF, FISMA, and DoW cybersecurity requirements. The successful candidate will work closely with ISSMs, ISSOs, engineers, system owners, and government stakeholders to facilitate authorization activities, manage cybersecurity risks, and ensure security controls are properly implemented and documented. The Cybersecurity Analyst will provide support with assessment, and maintenance of RMF artifacts and authorization packages, ensuring documentation is complete, accurate, and compliant with applicable policies and standards. This position requires the ability to analyze cybersecurity risks, identify compliance gaps, coordinate remediation efforts, and support continuous monitoring activities across complex IT environments, including cloud, on-premises, and hybrid architectures.
 
 
 The ideal candidate will possess extensive experience supporting DoW cybersecurity programs, managing multiple ATO efforts simultaneously, and utilizing tools such as eMASS to track authorization activities and compliance requirements. Strong communication and collaboration skills are essential, along with the ability to present cybersecurity findings, risks, and status updates to senior leadership and government customers. A CISSP certification and a strong understanding of cybersecurity governance, risk management, and compliance principles are required.
 
 
 TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. &ldquo;Technology moving at the speed of thought&rdquo; embodies these principles &ndash; the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.
 
 
 We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays.
 
 
 The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation.
 
 
 By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP". As part of the application process, you agree that TekSynap Corporation may retain and use your name, e-mail, and contact information for purposes related to employment consideration.
 
 
 
 Additional Job Information
 
 
 
 
 WORK ENVIRONMENT AND PHYSICAL DEMANDS
 
 
 
 The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
 
 
 <ul>
 <li>
 Location: JBSA Fort Sam Houston, TX
 </li>
 <li>
 Type of environment: Office
 </li>
 <li>
 Noise level: (Low, Medium, High) Low
 </li>
 <li>
 Work schedule: Schedule is day shift Monday &ndash; Friday. May be requested to work evenings and weekends to meet program and contract needs.
 </li>
 <li>
 Amount of Travel: Less than 10%
 
 
 </li>
 </ul>
 
 PHYSICAL DEMANDS
 
 
 
 The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
 
 
 While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds. The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.
 
 
 
 WORK AUTHORIZATION/SECURITY CLEARANCE
 
 
 
 <ul>
 <li>
 US Citizen
 </li>
 <li>
 Must be able to pass a NACI background check
 
 
 </li>
 </ul>
 
 Other Information
 
 
 
 Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.
 
 
 TekSynap is a drug-free workplace. We reserve the right to conduct drug testing in accordance with federal, state, and local laws. All employees and candidates may be subject to drug screening if deemed necessary to ensure a safe and compliant working environment.
 
 
 
 EQUAL EMPLOYMENT OPPORTUNITY
 
 
 
 In order to provide equal employment and advancement opportunities to all individuals, employment decisions will be based on merit, qualifications, and abilities. TekSynap does not discriminate against any person because of race, color, creed, religion, sex, sexual orientation, gender identity, protected veteran status, national origin, disability, age, genetic information or any other characteristic protected by law (referred to as &ldquo;protected status&rdquo;). This nondiscrimination policy extends to all terms, conditions, and privileges of employment as well as the use of all company facilities, participation in all company-sponsored activities, and all employment actions such as promotions, compensation, benefits, and termination of employment.
 
 
 TekSynap is committed to ensuring that our online application process provides an equal employment opportunity to all job seekers, including individuals with disabilities. If you believe you need a reasonable accommodation in order to search for a job opening or to submit an application, please contact hr@teksynap.com for assistance.
</div>

Cyber Analyst

Valeo

<div>
 Valeo est une entreprise mondiale de haute technologie qui con&ccedil;oit des solutions r&eacute;volutionnaires pour r&eacute;inventer la mobilit&eacute;. Nous sommes un &eacute;quipementier partenaire des constructeurs automobiles et des acteurs de la nouvelle mobilit&eacute; dans le monde entier. Notre vision ? Inventer une mobilit&eacute; plus verte et plus s&ucirc;re, gr&acirc;ce &agrave; des solutions ax&eacute;es sur la conduite intuitive et la r&eacute;duction des &eacute;missions de CO2. Nous sommes leaders dans nos domaines d'activit&eacute; et reconnus comme l'une des plus grandes entreprises innovantes au monde.
 
 
 
 
 As part of business solution implementation projects, you will be responsible for ~
 
 
 
 
 <ul>
 <li>
 Provide Cybersecurity architecture best practices and Cybersecurity requirements in the other fields
 </li>
 <li>
 Design, support the implementation and control the Cybersecurity of architectures
 </li>
 <li>
 Perform Cybersecurity watch
 </li>
 <li>
 Upon request, provide assistance on other critical topics (e.g. incidents, vulnerabilities)
 
 
 </li>
 </ul>
 
 Accountability
 
 
 
 <ul>
 <li>
 Provide Cybersecurity architecture best practices and Cybersecurity requirements in the other fields
 </li>
 <ul>
 <li>
 Define/update Cybersecurity architecture best practices based on Valeo CSMS (Cybersecurity Management System), Cybersecurity standards, Valeo Information Systems environment and other product disciplines when applicable.
 </li>
 </ul>
 <li>
 Design, support the implementation and control the Cybersecurity of architectures
 </li>
 <ul>
 <li>
 Determine Cybersecurity requirements in a way to fulfill business objectives and Valeo Cybersecurity requirements
 </li>
 <li>
 Plan, research and design robust Cybersecurity architectures
 </li>
 <ul>
 <li>
 Including full product or information management covering the full lifecycle as detailed in the CSMS, whenever applicable
 </li>
 <li>
 Including DRP (Disaster Recovery Plan), log management, potential integration issues and cost constraints, when applicable
 </li>
 </ul>
 <li>
 Analyze and assess external components (e.g. libraries, software, hardware) and internal item (e.g. IS/IT solutions) in his/her scope of responsibility, according to Valeo Cybersecurity standards
 </li>
 </ul>
 <li>
 Ensure the Cybersecurity of some Valeo critical systems (e.g. platform, solution, service)
 </li>
 <ul>
 <li>
 Anticipate possible Cybersecurity risks, identify areas of weakness, and respond effectively to possible Cybersecurity breaches
 </li>
 <li>
 Control final Cybersecurity structures to ensure they behave as expected
 </li>
 </ul>
 <li>
 Cybersecurity watch
 </li>
 <ul>
 <li>
 Remain up to date with the latest Cybersecurity systems, standards, authentication protocols, Cybersecurity solutions, software/component vulnerabilities and threats
 
 </li>
 </ul>
 </ul>
 
 Responsibility
 
 
 
 <ul>
 <li>
 Design, support the implementation and control the Cybersecurity of architectures
 </li>
 <ul>
 <li>
 Acquire a deep understanding of technology Information Systems
 </li>
 <li>
 Perform risk assessments related to the context~
 </li>
 <ul>
 <li>
 Third-Party Risk Assessment
 </li>
 <li>
 Project Information Risk Assessment
 </li>
 </ul>
 <li>
 Depending on the project, design concept / software / components/ infrastructure / Cloud based Cybersecurity architectures
 </li>
 <li>
 Update the risk assessment whenever it is required (e.g. by an evolution of the requirements / context / project or service use case)
 </li>
 <li>
 Control that the Cybersecurity requirements are fulfilled during all the phases of the BCP (Business Continuity Plan) and DRP (Disaster Recovery Plan) when applicable
 </li>
 </ul>
 <li>
 Ensure the Cybersecurity of some Valeo critical systems (e.g. platform, solution, service)
 </li>
 <ul>
 <li>
 Follow the critical systems (platform, solution, service) during their whole life cycle~
 </li>
 <ul>
 <li>
 Ensure Cybersecurity has been taken into account in the RFIs/RFQs/RFPs (Request For Information/Quotation/Proposal)
 </li>
 <ul>
 <li>
 Advise on the architecture
 </li>
 <li>
 Write/validate the Cybersecurity requirements
 </li>
 </ul>
 <li>
 Perform the Third-Party Risk Assessments (when applicable)
 </li>
 <li>
 Participate to the bidders&rsquo; defense (when applicable)
 </li>
 <li>
 Contribute to and check the contractual Cybersecurity clauses. Liaise with the Legal department whenever it is needed. Report to the project manager or to the management the risks of clause non-execution.
 </li>
 <li>
 Perform Project Information Risk Assessments (when applicable)
 </li>
 <li>
 Advise on the detailed architecture (e.g. review, reuse, change)
 </li>
 <li>
 Control the Cybersecurity requirements
 </li>
 <ul>
 <li>
 Before the Go-Live and during the Run
 </li>
 <li>
 Whenever contractual obligations require it
 </li>
 </ul>
 </ul>
 <li>
 Follow or audit specific projects upon request of the Group Cybersecurity VP or delegates
 </li>
 <li>
 Report any situation that would put Valeo at risk
 </li>
 </ul>
 <li>
 Cybersecurity watch
 </li>
 <ul>
 <li>
 Share his/her Cybersecurity watch within the Cybersecurity organization
 </li>
 </ul>
 <li>
 Upon request, provide assistance on other critical topics (e.g. incidents, vulnerabilities)
 </li>
 <ul>
 <li>
 Provide technical expertise
 
 </li>
 </ul>
 </ul>
 
 Contribution
 
 
 
 <ul>
 <li>
 Ensure the Cybersecurity of some Valeo critical systems (e.g. platform, solution, service)
 </li>
 <ul>
 <li>
 Advise on possible evolutions. Propose/contribute to a roadmap for improvement.
 </li>
 <li>
 Assist in the Supplier selection.
 </li>
 <li>
 Assist the other Cybersecurity Officers for the projects, platforms, services whenever needed
 </li>
 </ul>
 <li>
 Upon request, provide assistance on other critical topics (e.g. incidents, vulnerabilities)
 </li>
 <ul>
 <li>
 Advise on actions to be done
 </li>
 <li>
 Assist in post-event analysis
 </li>
 </ul>
 <li>
 Other
 </li>
 <ul>
 <li>
 Report any situation that would put Valeo at risk
 
 </li>
 </ul>
 </ul>
 
 Perimeter
 
 
 
 <ul>
 <li>
 Valeo (Travels abroad are expected according to the needs).
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Education/Training
 
 
 
 
 
 What education and education level are necessary for the position?
 
 
 
 
 
 Required~ Master&rsquo;s degree in Computer Science and/or Cybersecurity
 
 
 
 
 Optional~ Certification(s) related to architecture such as~
 
 
 
 <ul>
 <li>
 CISSP (Certified Information Systems Security Professional)
 </li>
 <li>
 CISSP-ISSAP (Information Systems Security Architecture Professional)
 
 
 </li>
 </ul>
 
 Professional Experience
 
 
 
 
 
 How many years of professional experience in a specific professional area are required for the position?
 
 
 
 
 <ul>
 <li>
 &gt;8 years of relevant experience in Cybersecurity, in-depth knowledge of Cybersecurity strategies and architectures
 </li>
 <li>
 Extensive skills in Information Systems / IT risk management~
 </li>
 <ul>
 <li>
 Risk Assessment (EBIOS, Mehari, ...)
 </li>
 </ul>
 <li>
 Technical skills in~
 </li>
 <ul>
 <li>
 Cybersecurity protocols, cryptography, authentication, authorization
 </li>
 <li>
 Multi-factor authentication, single sign-on, identity management or related technologies
 </li>
 <li>
 IAM
 </li>
 <li>
 Secure development, DevSecOps, SSDLC
 </li>
 <li>
 Cloud Infrastructure Architecture (especially on AWS &amp; Google Cloud Platform).
 </li>
 <li>
 Security of containerization (Docker, Kubernetes)
 </li>
 <li>
 Infrastructure as Code
 </li>
 <li>
 Cybersecurity of IS business solutions (ALM, PLM, System Design etc.)
 </li>
 </ul>
 <li>
 Ability to interact with a broad cross-section of personnel to explain and enforce Cybersecurity measures
 </li>
 <li>
 Excellent written and verbal communication as well as business acumen and commercial outlook
 </li>
 <li>
 Client focus, and ability to work independently or as part of a collaborative team
 </li>
 <li>
 Knowledge of risk assessment methodologies~
 </li>
 <ul>
 <li>
 Third party auditing
 </li>
 <li>
 Cloud risk assessment methodologies
 </li>
 <li>
 Architecture design auditing
 
 </li>
 </ul>
 </ul>
 
 Languages
 
 
 
 <ul>
 <li>
 Required~ Fluency in English
 </li>
 <li>
 Optional~ French or other language
 
 
 </li>
 </ul>
 
 Other Specifications
 
 
 
 <ul>
 <li>
 Strategic problem-solving
 </li>
 <li>
 Rigor
 </li>
 <li>
 Pragmatism
 </li>
 <li>
 Curiosity
 </li>
 <li>
 Flexibility
 </li>
 <li>
 Communication
 </li>
 <li>
 Ability to work in a multicultural environment
 </li>
 <li>
 Ability to interact with a wide range of people from different backgrounds (non-technical audience included)
 
 
 </li>
 </ul>
 
 Position~
 
 
 
 Cybersecurity Analyst
 
 
 
 D&eacute;partement~
 
 
 
 R&amp;D DSIS App Team
 
 
 
 Schedule~
 
 
 
 Temps plein
 
 
 
 Employee Status~
 
 
 
 CDI
 
 
 
 Type de contrat~
 
 
 
 
 Job Posting Date~
 
 
 
 2023-02-08
 
 
 
 Join Us !
 
 
 Being part of our team, you will join~
 
 
 <ul>
 <li>
 one of the largest global innovative companies, with more than 20,000 engineers working in Research &amp; Development
 </li>
 <li>
 a multi-cultural environment that values diversity and international collaboration
 </li>
 <li>
 more than 100,000 colleagues in 31 countries... which make a lot of opportunity for career growth
 </li>
 <li>
 a business highly committed to limiting the environmental impact if its activities and ranked by Corporate Knights as the number one company in the automotive sector in terms of sustainable development
 
 
 </li>
 </ul>
 More information on Valeo~ https~//www.valeo.com
 
</div>

Cybersecurity Architect, GISACC

<div>Minimum qualifications:
<ul><li>Bachelor&rsquo;s in Computer Science or Information Security or MIS
</li><li>Preferably at least one of the following professional certifications:
<ul><li>GREM (GIAC Reverse Engineering Malware)
</li>GCTI (GIAC Cyber Threat Intelligence) 
<li>
</li></ul></li></ul>Key Skills
<ul><li>Collaborate with other team members and colleagues
</li><li>Communicate, present and report to relevant stakeholders
</li><li>Decompose and analyze systems to develop security and privacy requirements and identify effective solutions
</li><li>Decompose and analyze systems to identify weaknesses and ineffective controls
</li><li>Generate new ideas and transfer theory into practice
</li><li>Identify and solve cybersecurity-related issues
</li>Monitor new advancements in cybersecurity-related technologies 
<li>
</li></ul>Key Knowledge
<ul><li>Cybersecurity standards, methodologies and frameworks
</li><li>Cybersecurity-related research, development and innovation (RDI)
</li><li>Legal, regulatory and legislative requirements on releasing or using cybersecurity related technologies
</li><li>Multidiscipline aspect of cybersecurity
</li>Responsible information disclosure procedures 
<li>
</li></ul>Minimum experience:
<ul><li>4-7 years of experience with 2&ndash;4 years in threat research/reversing/detection engineering preferably with exposure in banking/fintech.</li></ul></div>
 <div>Minimum qualifications:
<ul><li>Bachelor&rsquo;s in Computer Science or Information Security or MIS
</li><li>Preferably at least one of the following professional certifications:
<ul><li>GREM (GIAC Reverse Engineering Malware)
</li>GCTI (GIAC Cyber Threat Intelligence) 
<li>
</li></ul></li></ul>Key Skills
<ul><li>Collaborate with other team members and colleagues
</li><li>Communicate, present and report to relevant stakeholders
</li><li>Decompose and analyze systems to develop security and privacy requirements and identify effective solutions
</li><li>Decompose and analyze systems to identify weaknesses and ineffective controls
</li><li>Generate new ideas and transfer theory into practice
</li><li>Identify and solve cybersecurity-related issues
</li>Monitor new advancements in cybersecurity-related technologies 
<li>
</li></ul>Key Knowledge
<ul><li>Cybersecurity standards, methodologies and frameworks
</li><li>Cybersecurity-related research, development and innovation (RDI)
</li><li>Legal, regulatory and legislative requirements on releasing or using cybersecurity related technologies
</li><li>Multidiscipline aspect of cybersecurity
</li>Responsible information disclosure procedures 
<li>
</li></ul>Minimum experience:
<ul><li>4-7 years of experience with 2&ndash;4 years in threat research/reversing/detection engineering preferably with exposure in banking/fintech.</li></ul></div>

Cyber Security Research Specialist

Search 445+ Cybersecurity analyst jobs near you this June. New roles added regularly across leading industries. Apply today.