Cyber Security Analyst Senior

Introduction  

Make a difference for national security by joining a team of dedicated IT professionals who will sustain, modernize and transform the enterprise IT capabilities for the Defense Counterintelligence and Security Agency (DCSA).  The National Security & Space Sector of SAIC is seeking a Cyber Security Analyst Senior to support a transformational infrastructure program for DCSA.  

SAIC is proud to be supporting DCSA in safeguarding our nation’s information. DCSA is the designated oversight authority on the accreditation of classified facilities, information systems, and the insider threat program. This involves security oversight of more than 10,000 companies and approximately 13,000 facilities involved in classified work throughout the DoD and 31 Federal agencies.  

Specifically, on the DCSA One IT program, SAIC will provide an enterprise IT solution that delivers highly secured and adaptable IT infrastructure, provides customer support, and cutting-edge technologies that support operations and advance the DCSA mission under a single IT environment (i.e., One IT). 

Job Description  

Plans and enacts measures needed to provide security services capability, including monitoring, vulnerability scanning/management, and incident detection and response services, to protect endpoints, email, web, systems, applications, and networks from security breaches and attacks, for overall sustainment and O&M efforts for all of DCSA’s planned and existing portfolio of applications IAW DoD and DCSA cybersecurity policies, procedures, and standards, including RMF and STIG compliance standards. Provides up-to-date situational awareness of security services, devices, and resources, remains abreast of threats, and ensures that the information environment is being continuously monitored for cybersecurity-relevant events and configuration changes that may negatively impact cybersecurity posture.  Supports efforts to define, develop, implement, upgrade, and document security controls. Supports cybersecurity risk assessments, penetration testing and vulnerability assessments and scanning to verify hosting security and recommend and implement targeted operating system IAVA’s, patches and system firmware/software upgrades. Performs security compliance testing, and supports all test reviews (including TRR, PTAR, and PRR), as well as planning, executing, and documenting all internal and IV&V testing. Provides Incident Response Service (INRS) support for identifying, analyzing, and categorizing alert or violation information. Supports response to and reporting of incidents, taking action to contain and eradicate malicious events, deploying/supporting incident response teams, providing cyber clean-up as required, recommending, and implementing mitigating actions and technology/tools to prevent reinfection, and providing cyber after-action reports (AARs). Supports creation, modification and sustainment of cybersecurity accreditation packages and artifacts. From a security perspective, contributes to test documentation to include test reports, test procedures, test plans, and test/user cases, as well as to other procedures and reports, such as application sustainment plans and production readiness documentation. Provide inputs into the Activity Report. 

Required Qualifications