GovCIO is hiring a Cybersecurity Analyst to provide cybersecurity, compliance, and accreditation support for Air Combat Command (ACC) missions at Tyndall AFB, FL ensuring the implementation, maintenance, and continuous monitoring of NIPR, SIPR, and DRSN enclaves. This role supports Risk Management Framework (RMF), TEMPEST, and Authority to Operate (ATO) requirements across multiple systems and secure network environments. This is an onsite position at Tyndall AFB, FL.

Correlates threat data from various sources to establish the identity and modus operandi of hackers active in client's networks and posing a potential threat. Provides the customer with assessments and reports facilitating situational awareness and understanding of current cyber threats and adversaries. Develops cyber threat profiles based on geographic region, country, group, or individual actors. Produces cyber threat assessments based on entity threat analysis. May provide computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments. Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.

• Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyberthreats to the client.
• Provides timely and actionable sanitized intelligence to cyber incident response professionals.
• Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture.
• Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks.
• Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership.

RMF & Accreditation Support

• Prepare, update, and maintain Xacta and eMASS project artifacts in support of DRSN ATO.
• Establish Security Control testing procedures and measure effectiveness of implemented Security Controls.
• Manage Xacta and eMASS projects throughout the RMF lifecycle of DRSN system.
• Coordinate with Authorizing Official to understand and implement security control/overlay changes as required.
• Review and update RMF artifacts including:
• System Security Plans (SSPs)
• Configuration Management Plans
• Security Assessment Reports
• POA&Ms
• Continuous Monitoring Checklists

Cybersecurity Compliance & Vulnerability Management

• Review vulnerability scans and perform corrective actions across all system hardware and software.
• Ensure systems are configured and validated in compliance with STIG requirements.
• Conduct vulnerability and compliance scanning as part of continuous monitoring schedules.

Technical Cyber Support

• Assess, update, and maintain documentation for DRSN, NIPR, and SIPR ATO packages.
• Serve in an Information System Security Manager (ISSM) capacity for supported systems.
• Support patch management, antivirus updates, and secure configuration enforcement across enclaves.
• Provide cybersecurity support aligned with the 20 CS missions to deliver full spectrum cyberspace capabilities to Combatant Commanders to expand decision space to defeat and deter adversaries.

High School with 10+ years (or commensurate experience)

Required Skills and Experience

• Clearance Required: Top Secret w/ SCI
• IAM Level 2 or higher
• Strong knowledge of RMF, NIST and USDOW cybersecurity standards
• Xacta, eMASS and vulnerability scanning tools
• Network enclave support (NIPR, SIPR, DRSN)
• Knowledge of TEMPEST requirements

Preferred Skills and Experience

• Cyber security experience supporting USAF communications squadrons
• Enterprise-level ATO support

Correlates threat data from various sources to establish the identity and modus operandi of hackers active in client's networks and posing a potential threat. Provides the customer with assessments and reports facilitating situational awareness and understanding of current cyber threats and adversaries. Develops cyber threat profiles based on geographic region, country, group, or individual actors. Produces cyber threat assessments based on entity threat analysis. May provide computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments. Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.

• Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyberthreats to the client.
• Provides timely and actionable sanitized intelligence to cyber incident response professionals.
• Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture.
• Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks.
• Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership.

RMF & Accreditation Support

• Prepare, update, and maintain Xacta and eMASS project artifacts in support of DRSN ATO.
• Establish Security Control testing procedures and measure effectiveness of implemented Security Controls.
• Manage Xacta and eMASS projects throughout the RMF lifecycle of DRSN system.
• Coordinate with Authorizing Official to understand and implement security control/overlay changes as required.
• Review and update RMF artifacts including:
• System Security Plans (SSPs)
• Configuration Management Plans
• Security Assessment Reports
• POA&Ms
• Continuous Monitoring Checklists

Cybersecurity Compliance & Vulnerability Management

• Review vulnerability scans and perform corrective actions across all system hardware and software.
• Ensure systems are configured and validated in compliance with STIG requirements.
• Conduct vulnerability and compliance scanning as part of continuous monitoring schedules.

Technical Cyber Support

• Assess, update, and maintain documentation for DRSN, NIPR, and SIPR ATO packages.
• Serve in an Information System Security Manager (ISSM) capacity for supported systems.
• Support patch management, antivirus updates, and secure configuration enforcement across enclaves.
• Provide cybersecurity support aligned with the 20 CS missions to deliver full spectrum cyberspace capabilities to Combatant Commanders to expand decision space to defeat and deter adversaries.