Junior Cyber Security Analyst (R-00168)

True Zero Technologies, a veteran-owned small business, is seeking a Junior Cyber Security Analyst to support system security assessments and ensure compliance with security controls. The role involves collaboration with technical teams, remediation of deficiencies, and participation in security release activities.

Responsibilities:

• Provide support for system security assessments of a cloud-based, NIST-regulated systems
• Work with technical and functional teams to define, document, and deliver security documentation and artifacts that demonstrate compliance with required security controls
• Support the remediation and tracking of identified deficiencies
• Work with the Security team to support continuous diagnostic and monitoring programs as needed
• Support the security work stream within the system release/change management process
• Review planned system changes
• Help identify and document security impacts
• Help coordinate security scanning, testing, reporting as well as production readiness and post implementation support activities
• Implement, administer, and use cybersecurity tools, systems and applications
• Develop policies, standards, and guidelines to ensure secure enterprise-wise operations, performance and resiliency
• Deploy and secure security systems, application layer and traditional firewalls, vulnerability management and forensics utilities, and other infrastructure deployed and maintained by the Information Security Office
• Develop plans to safeguard information against unauthorized access modification, and destruction, and ensure organizational continuity of operations
• Monitor, research, and respond to cyber related evens and incidents such as malicious code detection, intrusion, detection, system configuration, and patch management issues
• Conduct risk assessments, audits, and validate that system functionality, and security controls are implemented appropriately according to policy and industry best practices
• Conduct cybersecurity training and outreach organization-wide

Requirements:

• Implement, administer, and use cybersecurity tools, systems and applications; develop policies, standards, and guidelines to ensure secure enterprise-wise operations, performance and resiliency
• Deploy and secure security systems, application layer and traditional firewalls, vulnerability management and forensics utilities, and other infrastructure deployed and maintained by the Information Security Office
• Develop plans to safeguard information against unauthorized access modification, and destruction, and ensure organizational continuity of operations
• Monitor, research, and respond to cyber related evens and incidents such as malicious code detection, intrusion, detection, system configuration, and patch management issues
• Conduct risk assessments, audits, and validate that system functionality, and security controls are implemented appropriately according to policy and industry best practices
• Conduct cybersecurity training and outreach organization-wide
• BA or BS degree, or at least 4 years of experience in related field
• Minimum 1+ years supporting OR conducting federal system security assessments
• Minimum 1+ years developing formal security documentation
• Minimum 1+ years assessing and remediating security findings
• Minimum 1+ years exposure to the SDLC
• Minimum 1+ years experience with Release Management or Change Management
• Thorough knowledge of NIST SP 800-series security guidelines
• Active clearance, or ability and willingness to submit for a clearance may be required
• Approved to work in the United States
• Excellent written and oral communication skills
• Ability to work well in a team environment