JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. We develop and maintain realistic integrated test and training environments, and prepare our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges.
JOB SUMMARY: A Cybersecurity Analyst III performs a variety of cybersecurity tasks in monitoring information systems and securing the Information Technology (IT) infrastructure operational environment to include developing and updating system security plans (SSPs), developing plans of action and milestones (POA&Ms), managing and controlling changes to the systems, conducting audits, providing incident response, vulnerability assessments, and assessing the security impact of security and non-security-relevant changes. Work is at an intermediate level, involving managing deadlines, and cybersecurity engineering support for members of development, sustainment, or operations and maintenance team.
Employee will be responsible for the following functions/duties:
- Interface with the Authorizing Official (AO) and the Security Control Assessor (SCA) for coordination of Authorization to Operate (ATO) packages
- Manage multiple system packages throughout the ATO process
- Conduct research and reference reading in obtaining technical information
- Keep informed of currently approved standards, codes, and procedures applied to cybersecurity specialty
- Perform systems engineering activities in the areas of Cybersecurity/Information Assurance (IA)/System Security Engineering (SSE) and security assessment and authorization (A&A) in accordance with NIST SP 800-53 Risk management Framework (RMF)
- Apply risk management concepts to mitigate vulnerabilities in system security architectures
- Interface with the Information System Security Manager (ISSM), program managers, system stakeholders, and external contractors to coordinate cybersecurity requirements and architecture flow down from the system level to individual elements of the system
- Assist in preparation of reports, correspondence, or technical studies
- Perform other job-related duties, as required
RANGE POSITION DESCRIPTION: As a professional with JT4, the Cybersecurity Analyst III will be responsible for working with a motivated team to provide cybersecurity support to various DoW systems within the Southwestern Test Ranges. The Cybersecurity Analyst III will be required to analyze, design, develop, and implement security controls and policies to mitigate cybersecurity threats and improve system resiliency. With the constant evolution of the cybersecurity field, the Cybersecurity Analyst III will be required to maintain knowledge of current DoW and industry standard policies, best practices, cybersecurity trends, threats, and vulnerabilities and apply this knowledge at every step of the System Development Life Cycle for each system assigned. The Cybersecurity Analyst III will be in constant communication with teammates, program managers, system administrators, and engineers- good communication skills and professionalism are a MUST. Only highly motivated, passionate cybersecurity professionals need apply.
The Cybersecurity Analyst III / Section Lead will be required to:
- Demonstrate strong communication skills, analytical ability, good judgment, and the ability to work effectively with the customer and fellow cybersecurity professionals to ensure JT4 and our customers operate within DoW cybersecurity policies and procedures.
- Clarify DoW, branch of service, and JT4 policies, producing actionable requirements to be implemented by responsible Systems Engineers (SEs), System Administrators (SAs), Program Managers (PMs), and operators.
- Lead and mentor senior and junior Cybersecurity Analysts in support of the Risk Management Framework (RMF) Assessment and Authorization processes (Steps 0 through 4 and Step 6) throughout the various systems' cybersecurity lifecycles, including documentation of RMF System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms) in the DoW's Enterprise Mission Assurance Support System (eMASS).
- Lead senior and junior Cybersecurity Analysts with documenting system design, configurations, operational procedures, compliance and non-compliance status, and existing risk mitigation techniques implemented so that the Security Control Assessor, Authorizing Official, and other members of cybersecurity leadership can make informed cybersecurity risk decisions.
- Notify the responsible System Administrators (SAs), Program Managers (PMs), Information System Security Officers (ISSOs), and Information System Security Managers (ISSMs) of any changes that might affect security posture as well as findings and mitigations that require implementation.
- Support Information Assurance/Cybersecurity (IA/CS) support activities including testing, mitigation, annual IA/CS compliance, sustainment, vulnerability and risk management, and systems engineering support.
- Lead senior and junior Cybersecurity Analysts and System Administrators in providing cybersecurity engineering support to customers to ensure systems are engineered in accordance with (IAW) DoD Instruction (DoDI) 8510.01.
- Formulate and/or interpret cyber threat analysis of adversary techniques, tactics, and procedures used to disrupt computer networks.
- Demonstrate excellence in cybersecurity risk management in support of risk analysis techniques such as security impact analyses, cybersecurity tabletop exercises, risk management boards, and change control boards.
- Assist JT4 leadership in planning, designing, executing and assessing discussion-based exercises and other forms of cybersecurity risk analysis, as required.
- Liaise with Senior USAF and JT4 Leadership, including the 412 TENG ISSM, DT&E SCA and SCAR Team, and various internal and external program managers to ensure team objectives and performance goals are met.
- Manage the performance, tasking, and prioritization of efforts underway by a team of approximately ten cybersecurity analysts, ensuring timely project completion and customer satisfaction.
- Perform Section Lead duties, as defined by the Branch Supervisor and Department Manager.
- Performs other related lead tasks and duties as directed
REQUIREMENTS: A bachelor's degree (master's degree preferred) in Computer/Information Technology/Information Assurance DoD 8570.01-M, IAT Level III compliance; a Security+ certification; and other industry standard certificates such as CASP+CE, CCNP Security, CISA, CISSP, GCED, IH. CEH, CCNA, and CySA+ are required for this position. Must possess seven years' experience in technology or related area.
Additional desired qualifications include Certified Ethical Hacker (Master) or Certified Enterprise Risk Professional (CEH/CERP)
In addition, a Cybersecurity Analyst III must possess the following qualifications:
- Conceptual knowledge of RMF process, eMASS, ACAS, SCAP, STIG, Cyber Risk Assessments (CRA), Cyber Table Top (CTT) or related process
- Robust conceptual and practical understanding of IT infrastructure designs, technologies, products, and services
- Experience supporting various system configurations such as standalone, local area networks (LANs), and wide area networks (WANs)
- Experience formulating and/or interpreting cyber threat analysis of adversary techniques, tactics, and procedures used to disrupt computer networks
- Excellent written and verbal communication skills, analytical ability, judgment, and the ability to work effectively with the customer and Cybersecurity Engineering Support Team
- Ability to plan, organize, and work under strict deadlines.
- Experience with planning, designing, executing, and assessing discussion-based exercises
- must possess a valid, state issued driver's license
- Must be able to obtain and maintain security clearance
BENEFITS- Medical, Dental, Vision Insurance
- Life Insurance
- Health Savings Accounts/FSA's
- Disability Insurance
- Paid Time Off
- 401(k) Plan Options with Employer Match
- JT4 will match 50%, up to an 8% contribution
- 100% Immediate Vesting
- Tuition Reimbursement
SALARY: The expected pay range for this position is $120,000 to $150,000 annually
Note: The salary range offered for this position is a good faith description of the expected salary range this role will pay. JT4, LLC considers factors such as (but not limited to) responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and business considerations when extending an offer.
OTHER RESPONSIBILITIES: Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job.
WORKING CONDITIONS: Work is performed in a typical office environment with no unusual hazards. Occasional lifting (up to 20 pounds), constant sitting and use of a computer terminal; constant use of sight abilities while writing, reviewing, and editing documents, constant use of speech/hearing abilities for communication; and constant mental alertness are required.
Routine travel to remote company work locations and work in field environment with occasional overnight assignment may be required.
DISCLAIMER: The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of persons so classified.
Tasking is in support of a Federal Government Contract that requires U.S. citizenship. Some jobs may require a candidate to be eligible for a government security clearance, state-issued driver's license, or other licenses/certifications, and the inability to obtain and maintain the required clearance, license, or certification may affect an employee's ability to maintain employment.
SCC: JCIS11, A1412TW
