Job Title: Information Security Analyst
Location: Various locations
Job Category: Information Technology
Time Type: Full-time
Potential for Telework: Yes
Travel: The contractor shall be required to travel in support of PWS requirements
Minimum Clearance Required to Start: TS/SCI
Employee Type: W2 or 1099
Citizenship: US Citizen, no Dual Citizenship
Locations: Offutt, Hill, McConnell, Hickam, Tinker, JBER AK,Barksdale, Ramstein, McGuire, Pittsburgh, Grissom,Eglin, Tyndall, JB Andrews, Beale,Scott, Sioux City, Pittsburgh, Rickenbacker, Forbes,Homestead, Key Field, McDill, JB Andrews,Seymour Johnson, McConnell, NAS JRB Ft Worth,Pease NH, Little Rock AR, Kirtland, Eielson,Wright-Patterson, Spangdahlem
NexThreat is looking for an information security analyst to provide functional mission analysis and cybersecurity assistance. A perfect candidate should fully understand DoD Mission Assurance concepts and principles and how they relate to the United States Air Force (USAF) Mission. Should be familiar with the purpose and use of the Mission Assurance Decision Support System (MADSS) and other similar database repositories, such as the Strategic Mission Assurance Database System (SMADS).
Travel and Housing Allowance Information:
Overseas Costs Insurance, Cost of Living Allowance (COLA), Living Quarters Allowance (LQA), Education Allowance, & Outside Continental United States (OCONUS) Relocation Allowance). A portion or all of the Income earned may qualify for the Foreign Earned Income Tax Exclusion, please consult your tax professional.
Responsibilities:
- Investigate a diverse collection of network activities in cyberspace to determine essential MRT-C support designed for command, control, processes, and systems.
- Develop a strategy to identify, evaluate, and minimize risks in the local cyberspace environment that are crucial for mission success.
- Create and implement strategies and techniques to merge and display relevant MRT-C based on essential systems and network services.
- Identify and analyze trends to define MRT-C requirements and provide guidance and alignment services.
- Assist with FMA-C, identifying, mapping, and developing a defense plan to safeguard MRT-C.
- Maintain databases to monitor systems, modify user boundaries, and create indexing to make searches easier.
- Utilize classified and unclassified networks and information portals to create support and information distribution plans for mission activities.
- Review and provide recommendations for establishing new or revised policies, procedures, objectives, and organizational design for the staff, as necessary.
- Coordinate with local SMEs to resolve events and/or incidents.
- Brief supporting recommendations and Courses of Action.
- Define and perform vulnerability assessments leveraging threat analysis to scope and prioritize efforts.
- Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).
- Coordinate with enterprise-wide cyber defense staff to validate network alerts.
- Document and escalate incidents (including event’s history, status, and potential impact for further action) that may cause ongoing and immediate environmental impact.
- Perform cyber defense trend analysis and reporting.
- Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.
- Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.
Degrees, Certifications, and Education Requirements:
- Bachelor's degree in Computer Science, Information System Engineering, Business, or related technical discipline in cybersecurity or information technology.
- Possess 3 years of combined experience in the following:
o Functional Mission Analysis in Cyberspace processes and associated mapping and defense of Mission-Relevant Terrain in Cyberspace.
o Information Technology (IT) cybersecurity principles, concepts, and methods to investigate, analyze, and respond to cyber incidents within a computer network environment or Enclave.
o IT security principles, policies, products and services to assess risk factors and advise on vulnerability to attack from a variety of sources (e.g., destructive progr