The following states and territories are excluded from this job ad: AK, CA, CO, CT, HI, MA, NJ, NY, OR, PR, VT, WA.

Location: Remote

Position Description:

The Cybersecurity Analyst prevents cyberattacks by providing monitoring systems, security guidance, evaluating threats, and ensuring compliance with security guidelines.

Minimum/General Experience: Junior Cybersecurity Analyst 3 years' experience in cybersecurity; Cybersecurity Analyst 5 - 7 years of experience in cybersecurity.

Minimum Education: Bachelors' Degree in computer science, electronics engineering, or other related discipline or equivalent years of experience.

Essential Skills/Qualifications:

• Experience with computer network penetration testing and techniques
• Excellent system administration skills
• Ability to perform vulnerability scans on various operating systems
• Ability to identify and spotlight vulnerabilities on networks, correct problems, and prevent security breaches
• Working knowledge of security technologies including firewalls, proxies, SIEM, antivirus software, and Identity Providers (IDPs)
• Working knowledge of penetration testing, network security, and the techniques used to expose and correct security flaws
• Familiarity with Enterprise Mission Assurance Support Service (eMASS), Risk Management Framework (RMF), and NIST 880-37 (preferred)
• Excellent analytical and conceptual thinking skills
• Ability to work collaboratively with a team of peers

Security: Ability to obtain/maintain a Federal Civilian Public Trust

• U.S. Citizenship or permanent resident

Federal Civilian Public Trust Consists of a review of up to but not limited to:

• Covers 5-10 year period and in some instances lifetime events
• OPM Security Investigations Index (SII)
• DOD Defense Central Investigations Index (DCII)
• National Agency Check (NAC) records
• FBI name check
• FBI fingerprint check
• Credit report check
• Written inquiries to previous employers and references listed on the application for employment
• Potential interviews with the subject, spouse, neighbors, supervisor, coworkers
• Law enforcement check
• Court records check
• Education check- Attendance and Degrees

Project Tasks/activities include, but are not limited to:

• Provide security guidance for new system Authorizations to Operate (ATOs) to ensure each security control and associated control correlation identifiers (CCI) implementation details are accurate and security artifacts are uploaded to support full control implementation
• Review all artifacts to ensure accuracy and compliance with the Authorization Requirements Standard Operating Procedure (SOP)
• Ensure appropriate plan of action and milestones (POA&Ms) are opened for the controls or CCIs if full control or CCI implementation is not achievable
• Work closely with Information Security Officers (ISOs), System Stewards, and Information System Security Officers to achieve the goal of risk identification/mitigation and longer term ATOs
• Follow current eMASS or future governance, risk management, and compliance (GRC) tools, RMF step 1-3 processes and procedures as described in the as described in VA policy, directives, SOPs, NIST 800-37, and VA's Controls Explorer Knowledge Service in conducting the assessment
• Provide technical, management, and operational security control guidance to stakeholders on system compliance requirements reflective of the RMF to address specific issues, including those areas that are identified in the Authorization SOP and POA&M Management Guide, Cloud based services (Infrastructure as a Service, Platform as a Service, Software as a Service, and Federal Risk and Authorization Management Program)
• Communicate with system stakeholders to provide direction and priorities regarding POA&Ms, CCIs, and system security artifacts to align with the NIST RMF

Oxley Enterprises®, Inc. is a certified service-disabled veteran-owned (SDVOSB), economic disadvantaged woman-owned (EDWOSB), Small Business Administration Certified 8(a), HUBZone and small disadvantaged business (SDB) that has over 22 years of experience building and delivering quality IT systems and programs. Oxley is ranked in the INC 5000 for 2016, 2017, 2018, and 2021; 2018 CIO Bulletin Top 30 Places to Work; and in Diversity Business' 2014 Top 500 Emerging Business; 2013 Top 500 Emerging Business, Top 100 Diversity Owned, and Top 50 VA Woman Owned. Oxley is a 2019, 2020, and 2021 Department of Labor HIRE Vets Medallion Award Winner. Oxley is Virginia Values Veterans certified.

Oxley Enterprises®, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, among other things, or status as a qualified individual with disability.

If you require a reasonable accommodation to apply for a position at Oxley Enterprises, Inc., please send an email to our Human Resources Department at: careers@oxleyenterprises.com with the following information:

Subject Line: Accommodation Request

Provide a description of your accommodation request

Include your contact information: Full name, Email address, Best number to reach you (optional)

EEO is the Law https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf

Pay Transparency Nondiscrimination https://www.dol.gov/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf

We participate in the E-Verify program. http://www.dhs.gov/E-Verify