Overview

Since 2006, Intelligent Waves has delivered mission-focused multi-domain operational expertise and innovation to the Government through high-impact technology solutions in cybersecurity, data science, enterprise network engineering, software development, and platform mission support. Always ready. Anytime. Anywhere. Any domain.

Intelligent Waves is growing rapidly and has an outstanding new opportunity for a Cyber Risk Analyst on our team. This contract was awarded in 2022.

Work with us as we help our clients automate tasks so we can provide innovative solutions toward cloud migration.

Location:  This position is based in Reston, VA

Travel : None

Security Clearance:  Must be a United States Citizen and hold a current TS-SCI or TS with SCI eligibility security clearance.

Employees are required to follow all company and customer site COVID-19 protocols.

Responsibilities

Intelligent Waves is growing rapidly and has an outstanding new opportunity for a Cyber Risk Analyst on our team. Warnings about cyber threats are everywhere and the constantly evolving nature of these threats can make understanding them seem overwhelming to the DoD and the IC. In all of this "cyber noise," how can these organizations understand their risks and how to mitigate them? The answer is you. Build your knowledge as an information security risk specialist who knows how to break down complex threats into manageable plans of action.

As a Cyber-Risk Analyst on our team, you'll use your experience to work with DoD programs to discover their cyber risks, understand policies, and develop a mitigation plan. You'll get technical, environmental, and personnel details from engineers and SMEs to assess the entire threat landscape. Then, you'll help your team guide your client through a plan of action with presentations, white papers, and milestones. You'll work on translating security concepts for your client so they can make the best decisions to secure their mission critical networks and systems. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity, security and network tools, systems engineering, and data science.

***Salary is dependent on education level + years of relevant experience and will be determined by the DOD customer.***

Qualifications

Required:
5+ years of experience working in a professional IT environment
3+ years of experience with cybersecurity
3+ years of experience with Assessment and Authorization (A&A) in support of DoD and IC programs, including package development, artifact generation, and authority to operate (ATO)
Experience with security hardening of Windows and Linux operating systems and security tools, such as ACAS, SCAP, STIG/SRGs, SCC, eMASS/Xacta, ESS, Prisma Cloud, Kubernetes, Rancher, and Docker
Experience generating and maintaining System Security Plans (SSP), Implementation Plans, Privacy Impact Assessments, Security Assessment Plans (SAP), Risk Assessments, Plan of Action and Milestones (POA&M), and other A&A documentation
Knowledge of Risk Management Framework (RMF) and the A&A activities needed to obtain and maintain an ATO, including National Institute of Standards and Technology (NIST) and Committee on National Security Systems Instruction (CNSSI), including NIST SP 800-60, NIST SP 800-53, and CNSSI 1253
Security+ DoD 8570 Level II
Desired :    Experience with DoD or IC cybersecurity projects or programs
Experience with DevSecOps, Path-to-Production, and CI/CD
Experience with Cloud Authorization and Cloud Migration
Experience with administering Red Hat Enterprise Linux or Windows Server 2012 or higher
Ability to provide subject matter expertise to system engineering documents, including technical requirements documents, interface control documents, and system specifications
Ability to analyze and communicate complex technical challenges to both technical and non-technical clients and stakeholders
Ability to communicate and integrate between multiple customer stakeholders
Bachelor's degree

Since 2006, Intelligent Waves has remained committed to providing quality engineering, operations, and intelligence solutions to our clients and it all starts with YOU. Intelligent Waves provides a great and generous benefits package to include medical, dental and vision, paid PTO, life & disability packages. We also invest in our employees' futures by contributing with vesting starting from DAY 1, technical training, tuition bonuses, and much, much more.

Clearance Statement:  Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Only US citizens are eligible for a security clearance. For this position, Intelligent Waves will consider only applicants with security clearances.

Intelligent Waves LLC is an equal opportunity employer. We are committed to providing equal opportunity to all applicants and employees in full compliance with all applicable state and federal laws prohibiting discrimination based on race, color, age, gender, religion, national origin, disability, sexual orientation, and gender identity protected veteran status and individuals with disabilities, or any other class protected by applicable state or federal law.

As an Affirmative Action and Equal Opportunity Employer, IW is committed to the full inclusion of all qualified candidates and current employees. As part of this commitment, IW will ensure that those in need are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact humanresources@intelligentwaves.com.

A Veteran Friendly Organization
#IW

#CJ

<h3>Red Gate Group </h3>Red Gate is a certified SDVOSB whose core services include intelligence analysis, strategic planning, policy development, operational design, and technology integration services.At RED GATE , we do everything we can to serve our clients: Using the right technical skills, unique methodologies, best practices, and integrated technology, we help clients implement bold solutions. New approaches to emerging and evolving threats. Non-traditional ways to overcome entrenched obstacles. Advantage through opportunity. If you have a serious challenge or problem, we can help you solve it. The below job description provides details on how this role will help to serve our clients. <h3>Job Description </h3>Red Gate Group is seeking a skilled Cyber Risk Analyst to support the Defense Threat Reduction Agency (DTRA) in Reston, VA. In this role, you will play a critical part in identifying and mitigating cyber risks for mission-critical DoD systems and networks. You will collaborate with engineers and subject matter experts to evaluate technical, environmental, and personnel threats and guide clients through risk management strategies. This position offers a unique opportunity to apply your cybersecurity expertise while broadening your knowledge of security tools, systems engineering, and data science. As a Cyber Risk Analyst, you will help create and maintain key security documents, provide insight into cybersecurity policies, and support Assessment and Authorization (A&A) activities for DoD programs. Your work will directly contribute to securing essential defense operations and provide the opportunity to present findings to senior stakeholders. This role provides an exciting opportunity to be at the forefront of cybersecurity in defense operations, ensuring the safety and resilience of vital systems. If you are passionate about security and risk management, this position offers a platform to showcase and expand your expertise. Key Responsibilities: <ul><li>Identify and assess cyber risks for DoD programs and develop tailored mitigation strategies. </li><li>Collaborate with subject matter experts to evaluate and secure mission-critical networks and systems. </li><li>Develop and maintain security documentation such as System Security Plans (SSP), Risk Assessments, and Plans of Action and Milestones (POA&M). </li><li>Guide clients through the Risk Management Framework (RMF) process and ensure compliance with relevant cybersecurity standards and policies (e.g., NIST SP 800-53, CNSSI 1253). </li><li>Provide cybersecurity expertise and translate complex technical challenges into actionable plans for clients. </li> </ul><h3>Qualifications </h3><ul><li>Active TS/SCI </li><li>5+ years of experience working in a professional IT environment </li><li>3+ years of experience with cybersecurity </li><li>3+ years of experience with Assessment and Authorization (A&A) in support of DoD and IC programs, including package development, artifact generation, and authority to operate (ATO) </li><li>Experience with security hardening of Windows and Linux operating systems and security tools, such as ACAS, SCAP, STIG/SRGs, SCC, eMASS/Xacta, ESS, Prisma Cloud, Kubernetes, Rancher, and Docker </li><li>Experience generating and maintaining System Security Plans (SSP), Implementation Plans, Privacy Impact Assessments, Security Assessment Plans (SAP), Risk Assessments, Plan of Action and Milestones (POA&M), and other A&A documentation </li><li>Knowledge of Risk Management Framework (RMF) and the A&A activities needed to obtain and maintain an ATO, including National Institute of Standards and Technology (NIST) and Committee on National Security Systems Instruction (CNSSI), including NIST SP 800-60, NIST SP 800-53, and CNSSI 1253 </li> </ul>Desired Skills & Experience <ul><li>Experience with DoD or IC cybersecurity projects or programs </li><li>Experience with DevSecOps, Path-to-Production, and CI/CD </li><li>Experience with Cloud Authorization and Cloud Migration </li><li>Experience with administering Red Hat Enterprise Linux or Windows Server 2012 or higher </li><li>Ability to provide subject matter expertise to system engineering documents, including technical requirements documents, interface control documents, and system specifications </li><li>Ability to analyze and communicate complex technical challenges to both technical and non-technical clients and stakeholders </li><li>Ability to communicate and integrate between multiple customer stakeholders </li> </ul><h3>Additional Information </h3>The Red Gate Group, Ltd. is an Equal Opportunity/Affirmative Action Employer. The Red Gate Group, Ltd. considers applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. EEO is the Law #J-18808-Ljbffr

<div>John Marshall Bank is looking for a Vendor Management Risk Analyst who will assist in the assessment and monitoring of risks associated with third-party vendors. This person will facilitate risk classification, the due diligence process and promote overall regulation compliance. Additionally, this person will provide support to vendor relationship owners, as needed.<h3>Primary Responsibilities:</h3>Vendor Management:<ul><li>Support contract owners in establishing and maintaining strong relationships with vendors.</li><li>Evaluate vendor performance based on quality, price, delivery, and responsiveness.</li><li>Assist contract owners in developing and implementing strategies for selecting and managing vendors to optimize cost-effectiveness and efficiency.</li><li>Support contract owners in researching and negotiating favorable terms, pricing, and agreements with vendors.</li><li>Monitor vendor activities and ensure compliance with contract terms, policies, and procedures.</li></ul>Contract Management:<ul><li>Assist contract owners in negotiating and reviewing contracts.</li><li>Maintain a database of all vendor contracts and related documentation.</li><li>Ensure contracts are compliant with internal company policies.</li><li>Track key contract dates (renewals, terminations, etc.) and take proactive action.</li><li>Collaborate with finance, accounting and risk management teams to review terms and conditions for compliance and risk management.</li><li>Ensure timely and accurate execution of contracts, including renewals and amendments.</li></ul>Compliance and Risk Management:<ul><li>Ensure all vendor activities are aligned with regulatory, legal, and organizational requirements.</li><li>Conduct vendor audits and performance evaluations to mitigate risks and identify areas of improvement.</li><li>Develop and enforce policies and procedures for vendor selection, monitoring, and termination.</li><li>Manage contract-related risks, ensuring liabilities are minimized.</li></ul>Reporting and Analytics:<ul><li>Provide regular reports on vendor performance and contract status to senior management.</li><li>Analyze vendor data to identify trends, risks, and opportunities for improvement.</li><li>Maintain accurate records and documentation of all vendor interactions, negotiations, and contract activities.</li></ul>Collaboration and Coordination:<ul><li>Work closely with contract owners, finance, accounting, risk management, and other relevant departments to ensure smooth vendor operations.</li><li>Communicate vendor performance issues and potential contract risks to appropriate stakeholders.</li></ul><h3>Requirements</h3>Required:<ul><li>Bachelor's degree</li><li>Proven experience in vendor management, procurement, and contract administration.</li><li>Strong negotiation and communication skills.</li><li>Knowledge of vendor regulations, and industry best practices.</li><li>Ability to manage multiple projects and prioritize tasks effectively.</li><li>Proficiency in Microsoft Office Suite.</li></ul>Preferred:<ul><li>Bachelor's degree in Business, Banking, Supply Chain Management or a related field</li><li>Experience with N-Contracts Platform</li><li>Attention to detail and a high level of organizational skills.</li><li>Ability to build and maintain positive relationships with vendors and internal stakeholders.</li><li>Strong analytical and problem-solving skills.</li></ul>At this time, John Marshall Bank will not sponsor a new applicant for employment authorization for this position.John Marshall Bank is an Equal Opportunity Employer</div>
#J-18808-Ljbffr

John Marshall Bank is looking for a Vendor Management Risk Analyst who will assist in the assessment and monitoring of risks associated with third-party vendors. This person will facilitate risk classification, the due diligence process and promote overall regulation compliance. Additionally, this person will provide support to vendor relationship owners, as needed. <h3>Primary Responsibilities: </h3>Vendor Management: <ul><li>Support contract owners in establishing and maintaining strong relationships with vendors. </li><li>Evaluate vendor performance based on quality, price, delivery, and responsiveness. </li><li>Assist contract owners in developing and implementing strategies for selecting and managing vendors to optimize cost-effectiveness and efficiency. </li><li>Support contract owners in researching and negotiating favorable terms, pricing, and agreements with vendors. </li><li>Monitor vendor activities and ensure compliance with contract terms, policies, and procedures. </li> </ul>Contract Management: <ul><li>Assist contract owners in negotiating and reviewing contracts. </li><li>Maintain a database of all vendor contracts and related documentation. </li><li>Ensure contracts are compliant with internal company policies. </li><li>Track key contract dates (renewals, terminations, etc.) and take proactive action. </li><li>Collaborate with finance, accounting and risk management teams to review terms and conditions for compliance and risk management. </li><li>Ensure timely and accurate execution of contracts, including renewals and amendments. </li> </ul>Compliance and Risk Management: <ul><li>Ensure all vendor activities are aligned with regulatory, legal, and organizational requirements. </li><li>Conduct vendor audits and performance evaluations to mitigate risks and identify areas of improvement. </li><li>Develop and enforce policies and procedures for vendor selection, monitoring, and termination. </li><li>Manage contract-related risks, ensuring liabilities are minimized. </li> </ul>Reporting and Analytics: <ul><li>Provide regular reports on vendor performance and contract status to senior management. </li><li>Analyze vendor data to identify trends, risks, and opportunities for improvement. </li><li>Maintain accurate records and documentation of all vendor interactions, negotiations, and contract activities. </li> </ul>Collaboration and Coordination: <ul><li>Work closely with contract owners, finance, accounting, risk management, and other relevant departments to ensure smooth vendor operations. </li><li>Communicate vendor performance issues and potential contract risks to appropriate stakeholders. </li> </ul><h3>Requirements </h3>Required: <ul><li>Bachelor's degree </li><li>Proven experience in vendor management, procurement, and contract administration. </li><li>Strong negotiation and communication skills. </li><li>Knowledge of vendor regulations, and industry best practices. </li><li>Ability to manage multiple projects and prioritize tasks effectively. </li><li>Proficiency in Microsoft Office Suite. </li> </ul>Preferred: <ul><li>Bachelor's degree in Business, Banking, Supply Chain Management or a related field </li><li>Experience with N-Contracts Platform </li><li>Attention to detail and a high level of organizational skills. </li><li>Ability to build and maintain positive relationships with vendors and internal stakeholders. </li><li>Strong analytical and problem-solving skills. </li> </ul>At this time, John Marshall Bank will not sponsor a new applicant for employment authorization for this position. John Marshall Bank is an Equal Opportunity Employer #J-18808-Ljbffr

<h3>Job Description</h3><div>Job Description<div>Company Description At RED GATE we do everything we can to serve our clients: Using the right technical skills, unique methodologies, best practices, and integrated technology, we help clients implement bold solutions. New approaches to emerging and evolving threats. Non-traditional ways to overcome entrenched obstacles. Advantage through opportunity. If you have a serious challenge or problem, we can help you solve it.  The below job description provides details on how this role will help to serve our clients.Job Description The Red Gate Group is seeking a skilled Cyber Risk Analyst to support the Defense Threat Reduction Agency (DTRA) in Reston, VA. In this role, you will use your experience to work with DoD programs to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from engineers and SMEs to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, white papers, and milestones. You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission critical networks and systems. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity, security and network tools, systems engineering, and data science.Qualifications <ul><li>5+ years of experience working in a professional IT environment</li><li>3+ years of experience with cybersecurity</li><li>3+ years of experience with Assessment and Authorization (A&A) in support of DoD and IC programs, including package development, artifact generation, and authority to operate (ATO)</li><li>Experience with security hardening of Windows and Linux operating systems and security tools, such as ACAS, SCAP, STIG/SRGs, SCC, eMASS/Xacta, ESS, Prisma Cloud, Kubernetes, Rancher, and Docker</li><li>Experience generating and maintaining System Security Plans (SSP), Implementation Plans, Privacy Impact Assessments, Security Assessment Plans (SAP), Risk Assessments, Plan of Action and Milestones (POA&M), and other A&A documentation</li><li>Knowledge of Risk Management Framework (RMF) and the A&A activities needed to obtain and maintain an ATO, including National Institute of Standards and Technology (NIST) and Committee on National Security Systems Instruction (CNSSI), including NIST SP 800-60, NIST SP 800-53, and CNSSI 1253</li><li>Security+ DoD 8570 Level II</li><li>TS/SCI clearance</li></ul>Desired:<ul><li>Experience with DoD or IC cybersecurity projects or programs</li><li>Experience with DevSecOps, Path-to-Production, and CI/CD</li><li>Experience with Cloud Authorization and Cloud Migration</li><li>Experience with administering Red Hat Enterprise Linux or Windows Server 2012 or higher</li><li>Ability to provide subject matter expertise to system engineering documents, including technical requirements documents, interface control documents, and system specifications</li><li>Ability to analyze and communicate complex technical challenges to both technical and non-technical clients and stakeholders</li><li>Ability to communicate and integrate between multiple customer stakeholders</li><li>Bachelor's degree</li></ul> Additional Information The Red Gate Group, Ltd. is an Equal Opportunity/Affirmative Action Employer. The Red Gate Group, Ltd. considers applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. Know Your Rights</div></div>

Role Summary We are seeking highly skilled and experienced Senior Insider Risk Analysts to join our team. The ideal candidate will possess a strong background in counterintelligence and/or HUMINT targeting. Additional experience in insider threat/risk analysis in both government and corporate settings, particularly in technology-focused teams and/or enterprises, would be helpful. This role requires a keen ability to analyze complex data sets, conduct OSINT research, identify patterns, and assess potential threats. This role requires the ability to multitask under pressure in a large, matrixed organization. Current eligibility for a US TS/SCI clearance is required, with a current polygraph desirable. Advanced foreign language skills relevant to Advanced Persistent Threats would be of value. Position is based in Northern Virginia, with possibility of remote work for highly qualified candidates with experience working autonomously. Essential Duties <ul><li>Strong briefing and writing skills.</li><li>Strong OSINT skills.</li><li>Excellent customer relations skills in support of large, matrixed organizations.</li><li>Familiarity with various intelligence analysis platforms and software. </li><li>Demonstrated ability to manage and prioritize multiple tasks under tight deadlines. </li><li>Training and experience related to insider threat and data science. </li><li>Experience in conducting threat assessments and developing threat profiles. </li><li>Knowledge of legal and regulatory requirements related to insider threat programs. </li><li>Strong analytical skills with the ability to interpret complex data sets and identify patterns. </li></ul> Qualifications Education:<ul><li>Relevant bachelor’s degree associated with cybersecurity, international relations, or other national security-relevant disciplines. </li><li>Current eligibility for Top Secret/SCI clearance; current polygraph preferred. </li><li>Certifications such as Security+, Certified Counter-Insider Threat Professional (CCITP), CERT Insider Threat Program Manager Certificate, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH), and/or relevant certifications are desirable. </li></ul>Experience:<ul><li>Minimum of 5 years of experience in counterintelligence/HUMINT targeting or analysis</li><li>Experience with insider threat/insider risk programs</li><li>Experience working with or within the United States Intelligence Community (USIC). </li><li>Previous experience in a similar role within a large organization or government agency. </li></ul>Technical Skills:<ul><li>Experience with advanced threat detection technologies and methodologies </li><li>Experience with tools such as Analyst Notebook, User and Entity Behavior Analytics (UEBA), SIEM Systems, IAM, and Data Visualization </li><li>Strong analytical skills with the ability to interpret complex data sets and identify patterns. </li><li>Proficiency in threat analysis tools and methodologies. </li></ul>Soft Skills:<ul><li>Communication. </li><li>Problem-solving. </li><li>Teamwork skills are vital for the role.</li></ul> Physical Requirements The physical demands and work environment characteristics here are representative of those that must be met by the employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.<ul><li>This position requires the individual to be able to meet the physical demands that would require meeting with people in public and private locations, speaking in public and possible additional related demands.</li><li>The employee must be able to sit or stand for extended periods throughout the workday.</li><li>The employee must be able to work in various environments, including traveling for extended periods, participating in meetings, and attending events.</li><li>The employee must be able to use a computer keyboard and mouse, as well as other office equipment.</li><li>The employee must be able to regularly engage in verbal communication, which includes talking and listening effectively in person, over the phone, and during virtual meetings.</li><li>The employee is frequently required to use hands to finger, handle or feel objects, tools or controls; reach with hands and arms.</li><li>The employee should be able to lift and/or move up to 20 pounds.</li><li>The employee is occasionally required to stand, walk, sit, climb or balance, stoop, kneel, crouch or crawl.</li><li>Specific vision abilities required by this position include close vision, distance vision, color vision, peripheral vision and the ability to adjust focus.</li><li>The noise level in the work environment is usually moderate.</li></ul> Note: the above statements are intended to summarize the nature and level of the work and typical responsibilities and duties being performed by the incumbents of this job. They are not intended to be an exhaustive list of all responsibilities, duties and tasks required of the position. Equal Opportunity Statement Cyber Defense Labs is an equal opportunity employer and strives to ensure our workforce reflects the diversity of the communities we serve. All qualified applicants will receive consideration for employment without regard to disability, race, color, religion, sex, national origin, sexual orientation, gender identity, or any other characteristic protected by law. We are committed to providing reasonable accommodations to qualified individuals with disabilities. If you need an accommodation to participate in the application process, please contact HumanResources@cyberdefenselabs.com. This job description is for the ​exempt​ position of the Insider Risk Analyst has been approved by management.

Job Details  Level  Experienced  Job Location  National Capitol Region - NCR, VA  Position Type  Full Time  Education Level  High School Diploma/ GED   Description  Vickers and Nolan Enterprises (VNE) is an engineering company that provides Government projects and programs with experienced and dedicated system architects, engineers, subject matter experts (in tactical intelligence), and program managers. VNE also develops training courses and tools to prepare warfighters to effectively employ tactical intelligence systems and provide management guidance to the Government organizations that develop these systems.
VNE has earned a reputation for exceptional performance, innovation, agility, and responsiveness in the Intelligence Community (IC). We attack our mission with a comprehensive understanding of the data available and required; skilled research, design, development, integration, and testing of systems and software solutions; expertise in cybersecurity/information assurance and technology; programmatic, acquisition, and logistics support know-how; and our own unique training curricula that enables students to excel at intelligence operations across all levels of the community.
VNE is devoted to improving tactical operations at home and abroad by enabling the seamless transition of data across the intelligence community and developing/integrating solutions to unify operations and intelligence.
VNE is a Service Disabled Veteran Owned Small Business (SDVOSB) founded in 2004 in Stafford, VA.
Qualifications  VNE, LLC is looking for a TS/SCI Cleared Cyber Risk Analyst
Minimum Qualifications:
Education:
HS Diploma/GED
Security+ DoD 8570 Level II

Experience:
5+ years of experience working in a professional IT environment
3+ years of experience with cybersecurity
3+ years of experience with Assessment and Authorization (A&A) in support of DoD and IC programs, including package development, artifact generation, and authority to operate (ATO)
Experience with security hardening of Windows and Linux operating systems and security tools, such as ACAS, SCAP, STIG/SRGs, SCC, eMASS/Xacta, ESS, Prisma Cloud, Kubernetes, Rancher, and Docker
Experience generating and maintaining System Security Plans (SSP), Implementation Plans, Privacy Impact Assessments, Security Assessment Plans (SAP), Risk Assessments, Plan of Action and Milestones (POA&M), and other A&A documentation
Knowledge of Risk Management Framework (RMF) and the A&A activities needed to obtain and maintain an ATO, including National Institute of Standards and Technology (NIST) and Committee on National Security Systems Instruction (CNSSI), including NIST SP 800-60, NIST SP 800-53, and CNSSI 1253
TS/SCI level Clearance required.

Additional Qualifications Desired:
Experience with DoD or IC cybersecurity projects or programs
Experience with DevSecOps, Path-to-Production, and CI/CD
Experience with Cloud Authorization and Cloud Migration
Experience with administering Red Hat Enterprise Linux or Windows Server 2012 or higher
Ability to provide subject matter expertise to system engineering documents, including technical requirements documents, interface control documents, and system specifications
Ability to analyze and communicate complex technical challenges to both technical and non-technical clients and stakeholders
Ability to communicate and integrate between multiple customer stakeholders
Bachelor's degree

Job Description:
As a Cyber-Risk Analyst on our team, you'll use your experience to work with DoD programs to discover their cyber risks, understand policies, and develop a mitigation plan. You'll get technical, environmental, and personnel details from engineers and SMEs to assess the entire threat landscape. Then, you'll help your team guide your client through a plan of action with presentations, white papers, and milestones. You'll work on translating security concepts for your client so they can make the best decisions to secure their mission critical networks and systems. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity, security and network tools, systems engineering, and data science.
Essential Duties of the Job:
Ability to communicate task requirement information to client in a clear and concise manner.
Must be able to sit and stand for prolonged periods of time, as well as lead and participate in meetings and working groups.
Requires visual acuity to use a keyboard.
Must be able to attend work each day, during scheduled hours, unless on travel or approved time off.
Ability to work on computer for long periods, and communicate with individuals by telephone, email and face-to-face

Physical Demands and Work Environment:
While performing duties of job, employee is occasionally required to stand; walk; sit; use hand to finger, handle or feel objects, tools, or controls; reach with hands and arms; talk and hear.
Employee must occasionally lift and/or move up to 25 pounds.
Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.
May be exposed to chemicals related to office equipment.
The noise level in the work environment is usually moderate (i.e. general office environment).

Benefits:
401 (K) w/ up to 3.5% Company Match
Health, Dental & Vision Insurance
Basic & Supplemental Life Insurance
Short & Long Term Disability Insurance
Flexible Spending Account
11 Paid Holidays
Paid Time Off (PTO)
Gym Membership (varies by location)
Corporate-Sponsored Events

Description The Leidos HUD End User Services (EUS) Team currently has an opening for an Information System Security Risk Analyst to support the Department of Housing and Urban Development (HUD). This is an exciting opportunity to use your experience assisting with HUD's cyber security mission. In this mission, we seek to expand HUD's current IT Shared Services and to modernize and standardize the current information technology (IT) environment. Primary Responsibilities: <ul> <li>Provide security vulnerability management, and policy/compliance support on HUD HITS network of 13,000 devices. Provide incident response for viruses/malicious code/breaches. </li><li>Conduct security risk assessments and compliance on General Support Systems, utilize tools for vulnerability management, and patch management (SCCM), Intrusion Detection System (IDS). Perform daily management of IBM Site Protector Intrusion Detection System, SumoLogic audit logging collection tool, Security Center, and Nessus for scanning. </li><li>Provide network security support for SonicWall SSL VPN appliance and ForeScout CounterACT. Ensure comprehensive device visibility and LAN device authentication. </li><li>Weekly response and track remediation to Department of Homeland Security (DHS) for NCATS reporting. </li><li>Write Initial Privacy Assessments (IPA), Privacy Impact Analysis (PIA) & PICLA (Civil Liberties), Privacy Threshold Analysis (PTA), and Risk Assessments. </li><li>Produce reports for Continuous Diagnostics and Mitigation (CDM). </li><li>Perform investigative searches in audit logs utilizing Tenable Log Correlation Engine (LCE). </li><li>Experience in system engineering, development, and information security to include implementing the Risk Management Framework (RMF) and Assessment & Authorization (A&A). </li><li>Thorough knowledge of applicable NIST Special Publications (800-18, 800-34, 800-37 Rev. 1, 800 53\53A Rev. 5, 800-60 Rev. 1, 800-137, 800-144) and FIPS 199 and 200 as they pertain to RMF </li><li>Develop and maintain System Security Plans (SSP) for networks and systems and conduct periodic compliance reviews of SSP. </li><li>Thorough knowledge and daily use of Cyber Security Assessment and Management (CSAM). </li><li>Utilize Plan of Action and Milestones (POAM) to identify and correct weaknesses in existing processes. </li><li>Prepare status reports and coordinate remediation responses to vulnerabilities or audit result findings. </li><li>Perform investigative searches of security relevant logs in response to incidents. </li><li>Develop security audits for Operating System compliance against CIS and STIG benchmarks. </li><li>Ensures a minimum of 95% Vulnerability patch compliance for systems on the customer's network. </li></ul> Basic Qualifications <ul> <li>Bachelor of Science Computer Network and Cybersecurity </li><li>10+ year(s) related experience or equivalent experience, training and/or industry security certifications. Requires deep understanding of and ability to apply principles, theories, and concepts of technical domain. </li><li>Must possess current Housing and Urban Development (HUD) Public Trust clearance. </li><li>Industry Cyber Security Certifications such as Information Systems Audit and Control Association Certified Information Systems Auditor (CISA), CompTIA Security + </li></ul> Preferred Qualifications Ability to wo independently to achieve day-to-day objectives with significant impact on operational results or project deliverables. Responsible for entire projects or processes within a technical area. <h5>Original Posting Date: </h5>2024-11-21 While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. <h5>Pay Range: </h5>Pay Range $101,400.00 - $183,300.00 The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. #Remote

Risk Analyst Jobs in Reston, VA

Cyber Risk Analyst
December 12, 2024

Cyber Risk Analyst
December 12, 2024

Vendor Management Risk Analyst
December 10, 2024

Cyber Risk Analyst
December 9, 2024

Vendor Management Risk Analyst
December 9, 2024

Cyber Risk Analyst
December 7, 2024

Insider Risk Analyst
December 7, 2024

Cyber Risk Analyst
December 6, 2024

Information Systems Security Risk Analyst
November 23, 2024

Quick filters

Top companies

Risk Analyst Jobs in Reston, VA

Cyber Risk AnalystDecember 12, 2024

Cyber Risk AnalystDecember 12, 2024

Vendor Management Risk AnalystDecember 10, 2024

Cyber Risk AnalystDecember 9, 2024

Vendor Management Risk AnalystDecember 9, 2024

Cyber Risk AnalystDecember 7, 2024

Insider Risk AnalystDecember 7, 2024

Cyber Risk AnalystDecember 6, 2024

Information Systems Security Risk AnalystNovember 23, 2024

Quick filters

Top companies

Cyber Risk Analyst
December 12, 2024

Cyber Risk Analyst
December 12, 2024

Vendor Management Risk Analyst
December 10, 2024

Cyber Risk Analyst
December 9, 2024

Vendor Management Risk Analyst
December 9, 2024

Cyber Risk Analyst
December 7, 2024

Insider Risk Analyst
December 7, 2024

Cyber Risk Analyst
December 6, 2024

Information Systems Security Risk Analyst
November 23, 2024