What are the responsibilities and job description for the Cyber Security Analyst (3128) position at SMX?
SMX is seeking a Cyber Security Analyst. In this role, you will provide support in the areas of computer forensics and cybersecurity assessments including cybersecurity production, integration, and test documentation including requirements definition, installation procedures and diagrams, and test procedures. You will participate with a team of government and contractor personnel with diverse backgrounds and depths of experience. You will use critical and creative thinking to accomplish tasks supporting multiple projects and customers. You will employ penetration testing (PenTesting) and offensive cybersecurity skills. You will have access to some of the best technical training, and more of it than you will ever have time to accomplish. You will have flexible daytime working hours onsite between 6AM to 5PM and rarely put in overtime or off-hours. Finally, you will enjoy the perk of parking right next to the building.
The Cyber Security Analyst will:
- Provide cybersecurity forensics and assessments across the full program life cycle for simple and complex computer equipment and systems projects, programs, and customers
- Apply and integrate principles to investigate, analyze, plan, design, develop, implement, test, or evaluate systems, subsystems, lab tools, and test tools; Interpret, assess, and create designs from technical drawings; Review and prepare technical analyses, reports, briefs change proposals, and other technical documentation
- Assist ISSM with conducting cybersecurity impact assessments on proposed system and application designs, engineering change proposals, and DevSecOPs implementations; maintenance of application and system IT security POA&Ms ensuring POA&Ms are reviewed and updated monthly; Coordinate mitigation activities with application developers; Monitor security controls throughout the system lifecycle; Conduct test and evaluation of constructed components and systems
- Analyze, design, develop, implement, test, or evaluates software, components, or systems related to functional requirements of systems, and associated support systems, or management information systems
- Solve problems, requiring solutions drawing from a broad range of technical disciplines, research and development experience; Work with peers and subordinates to identify risks and opportunities across multiple projects; Prepare, updates, and briefs project plans and status reports
- Identify equipment requirements and create, submit, and track equipment procurement documentation; Conduct site surveys, verify and inspect equipment, and coordinate CONUS/OCONUS equipment deliveries; Identify and coordinate with subcontractors necessary for equipment assembly, installation, and checkout
- Provide support to the Project Manager and sponsor for operational direction and oversight
- Model integrity and initiative
Required Skills and Experience:
- Clearance Required: Must be able to obtain/maintain Top Secret clearance eligibility w/SCI accesses
- Security or equivalent DoD8570/8140 IAT level-II certification to meet the Navy Cybersecurity Workforce requirements
- Four (4) or more years of applicable work experience and a bachelor's degree in computer science/IT-related field or a qualifying substitution
- Bachelor's degree can be substituted with associate degree plus six (6) years of applicable work experience, or no degree plus eight (8) years of applicable work experience
- Experience assessing security of applications/devices
- Experience with Linux and comfortable using it
- Experience with networking equipment (routers, switches)
- Experience implementing the DoD Risk Management Framework
- Experience implementing security of containerized applications
- Experience in maintenance of application and system IT security POA&Ms
- Must be able to effectively handle multiple and shifting priorities and possess excellent time management skills.
- Must possess strong written and verbal communication skills
Desired Skills:
- Experience with or certification in Penetration Testing (PenTesting)
- Examples include CompTIA PenTest , Global Information Assurance Certification (GIAC) Penetration Tester (GPEN), and Offensive Security Certified Professional (OSCP)
- CISSP or equivalent DoD8570/8140 IAT level-III certification
- Preference to computer science/IT-related bachelor's degree for future advancement
#cjpost #LI-KK1
At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.
We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what's possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.
SMX is committed to hiring and retaining a diverse workforce. All qualified candidates will receive consideration for employment without regard to disability status, protected veteran status, race, color, age, religion, national origin, citizenship, marital status, sex, sexual orientation, gender identity or expression, pregnancy or genetic information. SMX is an Equal Opportunity/Affirmative Action employer including disability and veterans.
Selected applicant will be subject to a background investigation.
