personnel security specialist

principal quality assurance analyst #293 Jobs in Washington

principal quality assurance analyst #293

all source intelligence analyst - journeyman Jobs in Washington

analyst iii, it business systems Jobs in Washington

analyst iii, it business systems

business intelligence analyst ii Jobs in Washington

business intelligence analyst ii

jr information security analyst

Diverse Agile Solutions

<div><p>Business Analyst &ndash; IT Governance &amp; Application Support</p>
<p><b>
Job Category:</b> Intermediate Business Analyst<br>
<b>Organization:</b> Federal Reserve Board &ndash; Division of Consumer Protection and Community Affairs (DCCA)</p>
<p>
Position Overview</p>
<p>
The Federal Reserve Board&rsquo;s <b>Division of Consumer Protection and Community Affairs (DCCA)</b> manages a portfolio of internal applications that support banking supervision, community development initiatives, and consumer protection policy. Many of these systems handle <b>sensitive regulatory data and personally identifiable information (PII)</b> and must comply with federal security and privacy requirements.</p>
<p>
DCCA is seeking a <b>mid-level Business Analyst</b> to support both <b>IT governance compliance and application development initiatives</b>. The selected candidate will play a key role in ensuring systems meet <b>FISMA, privacy, and data governance requirements</b>, while also supporting the development lifecycle by translating business needs into technical requirements.</p>
<p>
This role operates within a <b>small, highly collaborative IT team</b> where governance, analysis, and project coordination responsibilities intersect. The Business Analyst will work closely with <b>economists, bank examiners, policy analysts, attorneys, and technical staff</b> to ensure that regulatory applications remain compliant while meeting program needs.</p>
<p>
Key Responsibilities</p>
<p>
IT Governance &amp; Compliance</p>
<ul>
<li>Maintain and update <b>FISMA compliance documentation</b>, including System Security Plans (SSPs), security categorizations, and related artifacts.</li>
<li>Support and coordinate <b>Authority to Operate (ATO) processes</b>, working with agency security and privacy offices through assessment and authorization cycles.</li>
<li>Draft, review, and maintain <b>Privacy Impact Assessments (PIAs)</b> for systems that collect or process personally identifiable information.</li>
<li>Maintain the <b>DCCA system inventory</b>, ensuring records remain accurate and aligned with agency reporting requirements.</li>
<li>Support <b>data governance initiatives</b>, including data classification, records management, and retention schedule compliance.</li>
<li>Serve as a liaison with <b>information security, privacy, and compliance teams</b> on matters affecting the DCCA application portfolio.</li>
<li>Identify potential <b>compliance risks or gaps</b> and escalate issues requiring updated documentation or reassessment.</li>
<li>Prepare documentation packages to support <b>security reviews, audits, and compliance assessments</b>.</li>
</ul>
<p>Business Analysis &amp; Requirements Management</p>
<ul>
<li>Collaborate with <b>program stakeholders</b> (economists, policy analysts, bank examiners, and attorneys) to gather, analyze, and document business requirements.</li>
<li>Translate stakeholder needs into <b>structured requirements, process flows, and functional specifications</b> for application development.</li>
<li>Develop <b>process flow diagrams, use cases, and data flow documentation</b> to support system design and implementation.</li>
<li>Assist project leadership in <b>prioritizing and scoping requirements</b>, identifying dependencies and implementation considerations.</li>
<li>Support <b>User Acceptance Testing (UAT)</b> by developing test cases, coordinating with business users, and documenting test results.</li>
<li>Facilitate communication between <b>technical teams and business stakeholders</b> to ensure alignment throughout the development lifecycle.</li>
</ul>
<p>While this role contributes to testing activities and UAT coordination, it <b>does not function as a dedicated QA resource</b>.</p>
<p>
Required Qualifications</p>
<ul>
<li><b>U.S. Citizenship</b>.</li>
<li>Experience supporting <b>FISMA compliance documentation</b>, including System Security Plans and security categorization artifacts.</li>
<li>Experience developing or maintaining <b>Privacy Impact Assessments (PIAs)</b>.</li>
<li>Familiarity with federal information security frameworks including <b>NIST SP 800-53 and NIST SP 800-37</b>.</li>
<li>Experience supporting <b>Authority to Operate (ATO)</b> documentation and security assessment activities.</li>
<li>Experience maintaining <b>IT system inventories and governance documentation</b>.</li>
<li>Demonstrated experience in <b>business requirements gathering and documentation</b>, including process models, use cases, or functional specifications.</li>
<li>Ability to collaborate with <b>senior subject matter experts and non-technical stakeholders</b> to uncover and document underlying business needs.</li>
<li>Strong <b>written communication and documentation skills</b>.</li>
</ul>
<p>Preferred Qualifications</p>
<ul>
<li>Experience working in a <b>U.S. federal government or regulatory environment</b>.</li>
<li>Familiarity with <b>federal privacy and information security governance frameworks</b>.</li>
<li>Experience using <b>process modeling tools</b> such as Visio, Lucidchart, or similar platforms.</li>
<li>Familiarity with <b>Microsoft Power Platform or SharePoint Online</b> in a business-user context.</li>
<li>Experience coordinating <b>User Acceptance Testing with non-technical stakeholders</b>.</li>
<li>Relevant coursework or certifications in <b>information security, privacy, or records management</b> (e.g., CIPP, CISSP, CRM).</li>
</ul>
<p>Work Environment</p>
<ul>
<li><b>Full-time position</b></li>
<li><b>Initial on-site onboarding period:</b> approximately <b>6&ndash;8 weeks</b></li>
<li><b>Remote/telework eligible</b> following successful onboarding</li>
<li>Collaborative, mission-focused team environment</li></ul></div>

Business Analyst - Immediate

Sayres and Associates

<div><p>Sayres, a renowned leader in defense support services to the DOD in the shipbuilding industry, is currently seeking a skilled <b>Cybersecurity Analyst with Secret Clearance in Washington, DC.</b>
</p><p>Industry Certifications: Possess relevant certifications such as Network+, CISSP, CAP, or CEH.</p><p>
As a key member of our team, the Cybersecurity Analyst will play a vital role in ensuring the security and integrity of shipboard and shore-based operational sites, laboratory/development environments, and land-based test sites in support of the United States Navy.</p><p>
Responsibilities:</p><p>
The Senior Cyber Analyst will be responsible for supporting the technical implementation of the Risk Management Framework (RMF) Assessment and Authorization (A&amp;A) services, as well as supporting the Cybersecurity Acquisition process. They will conduct cybersecurity and risk assessments on Platform Information Technology (PIT) and PIT control systems (Industrial Control Systems) to identify and mitigate technical and non-technical vulnerabilities. Duties include, but are not limited to:</p><ul><li>
RMF Package Development: Perform multiple roles in eMASS for RMF package development, providing inputs and maintaining RMF packages.</li><li>
Vulnerability Remediation: Collaborate with engineers to remediate existing vulnerabilities or develop mitigations to minimize risks.</li><li>
Policy Compliance: Implement and apply DoD, DoN, CNSS, and NIST policy, instruction, and requirements.</li><li>
Ad Hoc Data Calls: Participate in ad hoc cybersecurity data calls to support critical assessments.</li><li>
Security Compliance Evaluation: Conduct traditional security compliance evaluation activities on shipboard platforms.</li><li>
Understanding of the Program Protection Policy</li><li>
Experience with Cyber Table Tops</li></ul><p>
Additional Duties:</p><ul><li>
Network Mapping and Vulnerability Scanning: Familiarity with network mapping, vulnerability scanning tools (e.g., ACAS, Nessus), and Security Technical Implementation Guides (STIGs) and Security Requirement Guides (SRGs).</li><li>
Network Knowledge: Strong understanding of general networking concepts (TCP/IP, OSPF, etc.).</li></ul><p>
Required:</p><ul><li>
BA or BS degree.</li><li>
Security+ certification.</li><li>
Experience as an ISSE or ISSM with relevant certifications.</li><li>
Industry Certifications: Possess relevant certifications such as Network+, CISSP, CAP, or CEH.</li><li>
5+ years of experience in cybersecurity performing vulnerability assessments. Experience and understanding of the NIST RMF.</li><li>
Minimum of 10 years' experience in cyber security issues at the subject matter expert level.</li><li>
Experience with Operating Systems such as RHEL, Unix, Windows, Cisco IOS.</li><li>
Good verbal and written communication skills, with the ability to collaborate effectively with a team of government and industry professionals.</li><li>
USN Service Craft Experience: first-hand experience with USN Service Craft/Auxiliary Ships or Small Boats.</li><li>
Ability to obtain a DoD Secret security clearance.</li><li>
Willingness to travel to support shipboard testing, BS degree in Computer Science/Engineering or related technical discipline.</li><li>
Experience in network mapping, vulnerability scanning, STIGs/SRGs.</li><li>
Experience scripting in VBA.</li></ul><p>
The position description represents a representative summary of the major responsibilities and accountabilities performed by the incumbents of this position. Additional duties may be assigned to meet specific project needs. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, gender identity, disability, or veteran status.</p><p>
At Sayres, we offer an atmosphere conducive to realizing your potential through personal and professional development while exceeding customers' expectations. Join our dynamic team and contribute to our continued excellence in providing service to the Federal Government since 2001. We offer a broad spectrum of technical, engineering, and administrative services, including acquisition, financial and program management; fleet synthetic training; logistics; ship construction engineering; systems engineering and integration; wargaming; test and evaluation; security, counterintelligence, and policy analysis.</p><p>
Sayres is headquartered in Washington, DC, with offices throughout the United States and has a presence abroad. #CJ</p></div>

Senior Cybersecurity Analyst

JFL Consulting

<div>Description:<p></p><p><b><br>
Job Title:</b> Senior Cyber Security Analyst</p><p><b>
Place of Performance:</b> Washington, DC 20392</p><p><b>
Mandatory Requirements:</b> Top Secret Clearance (SCI Eligible)</p><p><b>
Experience Level:</b> Senior-Level (8+ years in cybersecurity, 3+ years in passive vulnerability analysis)</p><p><b>
About JFL Consulting</b></p><p>
With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community&rsquo;s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients.
</p><p>Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer&rsquo;s unique requirements. Visit www.jflconsulting.com</p><p><b>
What we offer:</b></p><ul><li>
Free on-site parking in Washington, DC</li><li>
100% employer-paid medical, dental, and vision for employees and dependents</li><li>
Flexible Spending Accounts (healthcare, dependent care, and commuter)</li><li>
Life insurance, short-term disability and long-term disability</li><li>
401(k) with immediate vesting of company contribution</li><li>
Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)</li></ul><p><b>
Job Description</b></p><p>
JFL Consulting, LLC is seeking a <b>Senior Cyber Security</b> <b>Analyst</b> to support critical cybersecurity operations within highly secure environments. You&rsquo;ll play a key role in detecting anomalies, analyzing complex systems, and strengthening network security for high-value missions.
</p><p>This position is ideal for professionals who enjoy deep technical work, problem-solving, and contributing to meaningful national security efforts within a collaborative, mission-driven team.</p><p><b>
Responsibilities:</b></p><ul><li>
Ensure the safe and proper functional operation of the toolkit and its components.</li><li>
Collect and document measures of performance per approved CONOPS.</li><li>
Analyze and document behaviors, characteristics, and attributes of a network&rsquo;s baseline activity within steady-state operations.</li><li>
Analyze and investigate potential anomalies or outliers from established baseline.</li><li>
Analyze and identify misconfigurations, faults, and vulnerabilities within the network&rsquo;s architecture, subcomponents, and utilized communication protocols.</li><li>
Determine root source of anomalies and extent of vulnerable findings for validation with system users and administrators.</li><li>
Document and report anomalies to appropriate channels for further investigation and notification.</li><li>
Document vulnerable findings and provide recommendations through appropriate channels that increase both security and operational capacity of the respective network.</li><li>
Recommend improvements to current operations for potential incorporation into the overall program.</li><li>
Collaborate with cross-functional teams to support incident response, system hardening, and policy development as needed.</li><li>
Additional duties as assigned</li></ul>
Requirements:<p></p><p><b><br>
Education</b> <b>and Certifications</b>:</p><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Systems, or a related field preferred. Equivalent work experience may be considered in lieu of a degree.</li><li>
A master's degree is a plus.</li><li>
Must hold an IAT Level II certification (e.g., Security+ CE, CySA+, CCNA Security, GSEC).</li></ul><p><b>
Preferred:</b></p><ul><li>
CSSP Analyst certification (e.g., CEH, CySA+, GCIA, GCIH).</li><li>
Advanced certifications such as CISSP (Certified Information Systems Security Professional), OSCP (Offensive Security Certified Professional), or similar.</li></ul><p><b>
Technical Skills:</b></p><ul><li>
Experience supporting DoD or Intelligence Community networks
</li><li>Practical experience with firewalls, network TAPs, IDS/IPS, endpoint protection, and other network defense technologies</li><li>
Adept in evaluating network protocols utilizing network analyzers, such as Wireshark, Tshark, and tcpdump</li><li>
Experienced in analyzing network datasets, including Zeek and firewall logs, to support threat hunting and security investigations.</li><li>
Experienced in leveraging data analysis platforms, such as Splunk, Kibana, and Arkime, to detect and analyze anomalous network activity</li><li>
Proficient in triaging Suricata alerts, tuning rules, and creating custom detections.</li></ul><p><b>
Knowledge:</b></p><ul><li>
In-depth understanding of network vulnerabilities and misconfigurations</li><li>
Strong knowledge of cybersecurity principles, adversary techniques, and detection/response strategies</li><li>
Experience working within the framework of a CONOPS or similar operational document</li><li>
Awareness of DoD cybersecurity frameworks (e.g., RMF, CMMC, NIST 800-53) and their application in secure system design and monitoring.</li><li>
Knowledge of common enterprise network architectures and defense mechanisms</li><li>
Experienced in analyzing TCP/IP, DNS, HTTP/S, SSL/TLS, SMB, and RDP protocols to identify vulnerabilities, misconfigurations, and indicators of malicious activity.</li></ul><p><b>
Soft Skills:</b></p><ul><li>
Strong analytical and investigative mindset</li><li>
Excellent documentation and reporting skills</li><li>
Effective communicator with ability to explain technical issues to both technical and non-technical audiences</li><li>
Comfortable working independently and as part of a cross-functional team</li></ul><p><b>
JFL Consulting, LLC is an Equal Opportunity Employer.</b></p><p>
We do not discriminate against any applicant for employment on any legally recognized basis including, but not limited to: race, religion or creed, color, national origin, sex, age, disability, marital status, sexual orientation, genetic information, veteran status, status with regard to public assistance or any other protected class under federal, state or local statute. It is also the policy of JFL Consulting, LLC to provide reasonable accommodations for qualified individuals with disabilities.</p></div>

Sr. Cyber Analyst - Top Secret Clearance (SCI Eligible)

Cherokee Federal

<p>Defense Trade Analyst III<br/></p><p>The Defense Trade Analyst III is responsible for ensuring compliance with defense trade regulations and export controls. They analyze and assess international trade activities, particularly those related to defense articles and services, to ensure adherence to ITAR and EAR guidelines. The analyst conducts compliance audits, reviews export license applications, and provides guidance to internal stakeholders regarding proper export procedures. They stay updated on regulatory changes and assess their impact on business operations. The Defense Trade Analyst III also collaborates with cross-functional teams to develop and implement compliance strategies and training programs. Overall, this role plays a critical part in maintaining compliance and mitigating potential risks associated with defense trade activities.<br/></p><p>Compensation &amp; Benefits:<br/></p><p>Estimated Starting Salary Range for Defense Trade Analyst III : Pay commensurate with experience.<br/></p><p>Full time benefits include Medical, Dental, Vision, 401K and other possible benefits as provided. Benefits are subject to change with or without notice.<br/></p><p>Defense Trade Analyst III Responsibilities Include:<br/></p><p>Reviews, analyzes and evaluates cases in several commodity categories assigned to him/her (e.g. military electronics, arms and ammunition, aircraft, tanks, naval vessels, radar and missiles) to identify all pertinent legal, policy, regulatory, and related procedural considerations.<br/></p><p>Collects and analyzes data and information provided by U.S. industry and available precedent cases.<br/></p><p>Determines the necessity for, and refers for recommendations, significant cases (e.g., those without precedent or involving sensitive countries) to concerned agencies, such as the Department of Defense and NASA, as appropriate, as well as to appropriate bureaus in the Department. On cases not requiring referral, incumbent relies solely on his/her judgment on whether to approve, return without action, or deny license applications or other requests.<br/></p><p>Hosts and/or attends meetings to discuss case merits with all stakeholders in cases with significant national security and foreign policy considerations based on current geopolitical considerations (e.g., missile technology proliferation concerns, significant human rights concerns, etc.).<br/></p><p>Coordinates outside recommendations and makes decisions to approve or deny license applications and manufacturing, technical assistance and distribution agreements. Drafts all necessary clauses and provisos to be incorporated into approved licenses and agreements.<br/></p><p>Determines, based on legislation or U.S. policy, whether a particular request requires Congressional notification and prepares the required notification including coordination with appropriate offices /agencies.<br/></p><p>Recommends to the Office of Defense Trade Controls Policy certain cases, which, in his/her judgment requires verification to determine the validity of the transaction.<br/></p><p>Recommends to the Office of Defense Trade Controls Compliance certain cases, which, in his/her judgement require potential investigation for violation activity.<br/></p><p>Conducts discussions with U.S. industry on individual cases prior to submission as well as during the review process.<br/></p><p>Provides to industry guidance on export policy and administrative practices and interprets the ITAR and pertinent laws and legislation. This includes occasional presentations to industry, training courses and assigned portions of licensing and policy seminars. Makes or assists in making determinations regarding whether items are on the U.S. Munitions List.<br/></p><p>Drafts and coordinates, as necessary, emails, memoranda, congressional letters, standard operating procedures, escalation justifications, and other communications on matters relating to his/her responsibilities, including decision memoranda for the signature of the Secretary of State.<br/></p><p>Represents, under minimal supervision, the Office and Directorate at Bureau and Departmental export control and non -proliferation groups and training/outreach activities.<br/></p><p>Represents, under the supervision of a government employee of higher grade, the Office, Directorate, Bureau, or Department, depending on context, in meetings within the Department and interagency and with foreign governments and industry, providing expert advice, explaining laws and regulations, and explaining or defending official policies and positions.<br/></p><p>Works closely with the Office of Defense Trade Controls Policy and U.S. Customs officer assigned to DTC on the EXODUS program by providing guidance necessary to determine the seizure or release of shipments detained by Customs, or to determine jurisdictional control and compliance with U.S. regulations.<br/></p><p>Maintains, thorough review of current world events, technical journals, etc., current knowledge in foreign policy, industrial, and technological advances across the full breadth of the Office of Defense Trade Controls Licensing responsibilities.<br/></p><p>Operates with a minimal level of supervision in determining responsibilities for managing assigned portfolio, planning, organizing, and executing assigned responsibilities, including defining project objectives and requirements, initiating contact and coordinating activities with other organizations, and providing expert advice and guidance directly to senior officials both within and outside the Bureau.<br/></p><p>Analyzes and evaluates arms export control policies, procedures, and methods, in light of U.S. foreign policy objectives and makes recommendations for modifications to the supervisor. Coordinates on drafts of proposed arms export policies, practices, and procedures for the International Traffic in Arms Regulations (ITAR) and the United States Munitions List (USML).<br/></p><p>Assists employees of a higher grade in identifying, formulating, forging consensus for, executing, and following up new licensing policy initiatives.<br/></p><p>Performs licensing data analysis to support and inform policy-making officials, with review by employees of a higher-level grade.<br/></p><p>Drafts cables, decision/info memoranda, briefing papers, and other related documents to ensure they are consistent with licensing policy, they support U.S. policy goals and objectives, and they are consistent with pertinent U.S. laws and regulations. Sends such materials to Senior Licensing Management for final approval.<br/></p><p>As delegated by a supervisor may assigns work to lower grade analysts. Maintains cognizance of the status of projects and cases. Reviews completed work, as necessary. Provides guidance, answers questions, and provides additional training, as appropriate.<br/></p><p>Performs other job-related duties as required.<br/></p><p>Defense Trade Analyst III Experience, Education, Skills, Abilities requested:<br/></p><p>Bachelor Degree or combination of education and experience with AECA and ITAR regulatory experience.<br/></p><p>Knowledge of U.S. foreign policy and national security, including Department of State objectives.<br/></p><p>Knowledge of legislation affecting arms transfers.<br/></p><p>Knowledge of DDTC registration, compliance, and licensing processes.<br/></p><p>Strong customer-service focused skills.<br/></p><p>Strong interpersonal and partnering skills.<br/></p><p>Strong written and verbal communication skills and presentation skills. The government may require writing samples.<br/></p><p>Strong computer skills to include use of Microsoft Office Suites.<br/></p><p>Demonstrated ability to research, interpret and apply regulatory material in the process of evaluating license applications and taking final action on specific requests.<br/></p><p>Demonstrated ability to work with short-fused actions, meet deadlines; manage time, distribute responsibilities, and achieve milestones and deliverables.<br/></p><p>Has working knowledge of Microsoft Office Suite programs and be able to operate all office equipment including but not limited to: telephones, copy machines, fax machines, scanners, printers, and computers.<br/></p><p>Must pass pre-employment qualifications of Cherokee Federal.<br/></p><p>Company Information:<br/></p><p>Cherokee Nation System Solutions CNSS provides support, services, and solutions to federal and commercial customers. The company takes a personalized approach to solving our clients' toughest challenges, helping you make the most of your skills. CNSS is part of Cherokee Federal &ndash; a team of tribally owned federal contracting companies. For more information, visit cherokee-federal.com.<br/></p><p>#CherokeeFederal #LI #LI-WD1<br/></p><p>Similar Job Titles:<br/></p><p>Defense Trade Compliance Analyst<br/></p><p>International Trade Compliance Analyst<br/></p><p>Export Control Analyst<br/></p><p>Defense Trade Specialist<br/></p><p>Trade Compliance Officer<br/></p><p>Keywords:<br/></p><p>Defense trade regulations<br/></p><p>Export controls<br/></p><p>ITAR (International Traffic in Arms Regulations)<br/></p><p>EAR (Export Administration Regulations)<br/></p><p>Compliance auditing<br/></p><p>Legal Disclaimer: Cherokee Federal is an equal opportunity employer. Please visit cherokee-federal.com/careers for information regarding our Affirmative Action and Equal Opportunity Employer Statement, Accommodation request, and Presidential EO 14042 Notice.<br/></p><p>Pay: $135,000.00 - $140,000.00 per year<br/></p><p>Work Location: In person<br/></p>

Defense Trade Analyst III

VTG Defense

<div>Overview:
<div>
VTG is seeking a <b>Systems Analyst</b> to provide on-site IT support to the Navy's Activity Chief Information Officer (ACIO) office at the <b>Washington Navy Yard</b>. This is an onsite role. The IT Helpdesk Analyst will have a strong understanding of IT helpdesk operations, including troubleshooting Navy Marine Corps Intranet (NMCI)-related issues, supporting telecommunications, and maintaining asset inventory. This role requires proactive problem-solving, adherence to established standard operating procedures, and the ability to escalate complex issues effectively.</div><br>
<div></div>
Responsibilities:
<ul><li>Serve as a primary point of contact for NAVSEA HQ users, providing Tier 1 and Tier 2 IT support.</li><li>
Document and troubleshoot NMCI-related computer issues; liaise with NMCI Helpdesk for ticket creation and resolution.</li><li>
Provide SIPR tablet / surface pro configuration and telecommunications support to NAVSEA HQ personnel.
</li><li>Assist with the setup, installation, and configuration of hardware and peripherals.</li><li>
Maintain accurate NMCI asset inventory for NAVSEA HQ, including tracking and reporting.</li><li>
Organize and oversee hardware inventory management.</li><li>
Support ACIO with data call inputs and compliance reporting.</li><li>
Manage user accounts, service requests, and access permissions within Navy IT systems.</li><li>
Clearly articulate technical issues and propose effective resolutions.</li><li>
Perform additional duties as assigned in support of IT operations.</li></ul>
Qualifications:
<div><b>
Required skills:</b></div><ul><li>
5+ years of relevant experience.</li><li>
Must have and maintain an active DoD Secret clearance.</li><li>
Strong written and verbal communication skills.</li><li>
CompTIA Security+ certification.</li><li>
Experience supporting NMCI or other DoD IT systems.</li><li>
Proficient in Microsoft Office Suite (Word, Excel, PowerPoint, Outlook, Teams).</li><li>
Ability to obtain and maintain a DoD Secret Clearance.</li><li>
Excellent customer service skills with a proactive approach.</li><li>
Strong attention to detail and organizational skills.</li></ul><div><b>
Preferred Skills:</b></div><ul><li>
Veterans are strongly encouraged to apply.</li><li>
Bachelor&rsquo;s in Information Technology, cybersecurity, or similar field.</li><li>
Current CompTIA GSEC certification.</li><li>
Experience managing IT assets and troubleshooting Navy IT infrastructure.</li><li>
Familiarity with ServiceNow or similar IT Service Management (ITSM) platforms.</li></ul></div>

Systems Analyst

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
PROGRAM OVERVIEW</b></h5><div>
Engineering, integration, and cybersecurity support to design, build, and test enhanced services for the Department of Navy's IT architecture. Offers a wide range of roles, from cybersecurity experts to engineers specializing in systems, networks, software, and data center services.</div></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is seeking a NOSC Cyber Manager to support our customer onsite in Washington D.C.</div><ul><li>
Working as expert, conducts research and evaluates technical and all-source intelligence with specific emphasis on network operations and cyber warfare tactics, techniques, and procedures focused on the threat to networked weapons platforms and US and DoD information networks.</li><li>
Analyzes network events to determine the impact on current operations and conduct all-source research to determine advisory capability and intent.</li><li>
Prepares assessments and cyber threat profiles of current events based on the sophisticated collection, research, and analysis of classified and open-source information. Correlates threat data from various sources.</li><li>
Develops and maintains analytical procedures to meet changing requirements and ensure maximum operations.</li><li>
Collects data using a combination of standard intelligence methods and business processes.</li><li>
Produces high-quality papers, presentations, recommendations, and findings for senior US government intelligence and network operations officials.</li><li>
Mentoring and assisting junior and mid-level Incident Handlers for investigations</li><li>
Interface with customer onsite on behalf of the SOC team.</li><li>
Effective communication with customer and contract leadership leveraging briefing and writing skills</li><li>
Extensive knowledge in creating official documentation and procedures.</li><li>
Able to conduct gap analysis for the team.</li><li>
Experience with wide range of security vendor tools as well training analyst to use them.</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><ul><li>
10 years of Incident Handler/Incident Response experience, and at least 5 years supervisory or lead experience</li><li>
Requires a Top Secret with SCI eligibility level clearance</li><li>
SIEM content development</li><li>
Requires current DoD 8570 IAT Level II certification (CCNA Security, CySA+, CICSP, GSEC, Security+ CE, SSCP)</li><li>
Requires current DoD 8570 CSSP-Analyst certification. (CEH, CFR, CySA+, GCIA, GCIH, GICSP, SCYBER)</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

NOSC CYBER MANAGER

Anavation

<div><div><b>Be Challenged and Make a Difference</b></div><div></div><div><br>
In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.</div><div></div><div><b><br>
Description of Task to be Performed:</b></div><div>
AnaVation is seeking a Sr. ISSO for our mission critical customer in Washington, DC. You will work as part of a fantastic team providing security compliance expertise on high priority projects. Daily duties include, but are not limited to:</div><ul><li>Developing, maintaining, and assessing Security Assessment &amp; Authorization (SA&amp;A) packages resulting in an authority to operate (ATO) for IT systems.</li><li>Creating and maintaining SSPs and supporting documentation in accordance with agency guidelines and directives. This includes writing implementation statements, creating supporting documentation (e.g., Contingency Plans, Incident Response Plans, Account Management Plans, etc.), and performing self-assessments, while working with system stakeholders.</li><li>Having in depth security knowledge and experience in managing the security of a system&rsquo;s accreditation boundary.</li><li>Develop, coordinate, test, and train personnel on Incident Response Plans and Contingency Plans.</li><li>Ensuring that information systems are accredited, maintain their ATO, and are being continuously monitored.</li><li>Performing risk assessments for government systems, to include cloud-based systems.</li><li>Performing security control assessments to include collecting supporting artifacts/evidence and interviewing system owner/owner representatives.</li><li>Having an in-depth knowledge of the Risk Management Framework (RMF).</li><li>Maintaining and tracking system POA&amp;Ms.</li><li>Conducting vulnerability management and analysis.</li><li>Reviewing and analyzing government policy.</li><li>Taking ownership on various projects and efforts related to the items highlighted above.
</li><li>Improving on processes and procedures and making recommendations to improve the security posture of the agency's IT systems and applications.<br>
</li></ul><div></div><br>
<div>This position requires full-time, on-site support at a customer location in Washington, DC.</div><div>
Candidates must be able to work on-site daily and reside within commuting distance by the start date.</div><div>
Relocation assistance is not available for this role.</div>
<h3 class="jobSectionHeader"><b>Required Qualifications</b></h3><ul><li>
6+ years&rsquo; experience with NIST, FISMA, and Security Assessment &amp; Authorization.</li><li>
FedRAMP and Cloud experience (e.g., Azure, AWS, Oracle (OCI))</li><li>
Knowledgeable on various security-related NIST publications (e.g., SP 800-53r5, SP 800-53A, SP 800-18r1, etc.)</li></ul><ul><li>
Position requires a Top Secret clearance. Minimum clearance required to start: Secret</li><li>
Excellent oral and written communication skills.</li><li>
Certifications: CISSP required</li></ul><h3 class="jobSectionHeader"><b>
Preferred Qualifications:</b></h3><ul><li>
Familiarity with the security control families from the NIST guidance covered by the documents that they are responsible for evaluating.</li><li>
Ability to provide subject matter expert-level knowledge to the project team to ensure compliance with applicable requirements.</li><li>
Demonstrated knowledge of IT Security policy implementation statements, the regulatory structure of policy, the role of the Department of Homeland Security (DHS), the Office of Management and Budget (OMB), and the National Institute of Standards and Technology (NIST).</li></ul><ul><li>
Hands-on experience using a Governance, Risk, and Compliance tool, such as CSAM or eMASS.</li><li>
Ability to conduct gap analysis on non-federated vendor audit results, such as SOC Type 2, HIPAA comparison review and analyst against NIST SP 800-53 Revision 5 security controls.</li></ul><ul><li>
Hands-on experience providing C-Level presentation and reporting.</li><li>
Excellent written communication skills and understand the purpose and use of the System Security Plan (SSP).</li><li>
Possess an understanding of control inheritance as applied to the Risk Management Framework (RMF) implementation in the CSAM tool.</li><li>
Ability to accurately manage complex workstreams, comprehend the application of the RMF, and understand the application of security controls across the interface, application, operating system, network, and database layers of modern information systems. Understand the applicable artifacts used as evidence to assess compliance.</li><li>
Experience with multiple tools providing security functions such as vulnerability management (e.g., Nessus), configuration management (e.g., BigFix, SCCM, ePO), endpoint protection (e.g., antivirus, ATP), data loss prevention, and intrusion detection software and hardware.</li></ul><ul><li>
Ability to evaluate data flows, network diagrams, and logical security boundaries.</li><li>
Familiarity with the use of data analysis tools, including the use of Microsoft Excel or PowerBI to combine data from multiple sources.</li></ul><div><b>
Benefits</b></div><ul><li> Generous cost sharing for medical insurance for the employee and dependents</li><li> 100% company paid dental insurance for employees and dependents</li><li> 100% company paid long-term and short term disability insurance</li><li> 100% company paid vision insurance for employees and dependents</li><li> 401k plan with generous match and 100% immediate vesting</li><li> Competitive Pay</li><li> Generous paid leave and holiday package</li><li> Tuition and training reimbursement</li><li> Life and AD&amp;D Insurance</li></ul><div></div><div><b><br>
About AnaVation</b></div><div>
AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.</div><div></div><div><br>
If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!</div><div></div><div><br>
AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.</div></div>

Sr. Information Systems Security Officer

Explore 371+ Jr information security analyst in Washington this March. Find roles across top companies and apply now to boost your career.