Cybersecurity Analyst - ISM

James Scott LLC is actively seeking Cyber Security Analysts that possesses robust experience in Information Systems Security and Cybersecurity Analysis. Specifically, the program has needs for Risk Management Framework certification, cybersecurity continuous monitoring and reporting, and Automated Information System change management support.

Duty and Role:

The Cybersecurity Analyst shall assist in securing enterprise networks and information systems by
performing risk assessments, providing guidance, and implementing solid security measures and mitigation. The role also involves leading security technicians, conducting proactive security tasks, and using advanced diagnostic techniques to mitigate network-level security threats. Responsible for planning, managing, and supporting in-house security products, ensuring compliance with security frameworks and overseeing security control validation. The role also develops technical documentation and risk management strategies to enhance system resilience and regulatory compliance. Provides guidance and mentorship to security technicians, ensuring best practices are followed. Performs preventative security tasks and proactively identify vulnerabilities. Utilizes advanced diagnostic techniques to troubleshoot and resolve network security issues. Ensures compliance with security requirements for software, hardware, transition mediums, line disciplines, and protocols. Develops and maintains technical documentation and digital graphics to support cybersecurity initiatives. Oversees and conducts security control validation to ensure compliance with industry standards and regulations. Collaborates with Cross functional teams to enhance security posture and mitigate risks.
• Oversee technical support and operations of in-house security products and solutions.
• Plan, schedule, and manage cybersecurity programs, ensuring alignment with organizational objectives.
• Provide Cybersecurity Training sessions to USACE users.
• Lead Vulnerability Scanning sessions utilizing software for analyzing Static and Dynamic code.
• Continuously/actively monitor system security events using system log and system monitoring tools.
• Support Risk Management Framework assessment and authorization for projects.
• Analyze Personally Identifiable Information and Controlled Unclassified Information within CWBI and
prepare Privacy Impact Assessment and System of Record Notices (SORN.)
• Implement Continuous Monitoring for DoD Impact Level 4 (IL4) Cloud System ATO.

Required Skills and Experience:

• Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering
Management, Management Information Systems, Mathematics, or related degree, or related equivalent
additional experience.
• 4+ Years level experience working in government or industry in support of Cybersecurity Operations;
6 Years experience without a degree.
• Working-level experience in the following tools: ACAS, HBSS, AESS, eMASS
• Working-level experience in performing:
o SCAP Scans
o STIG Assessments
o FedRAMP Assessments

Desired, not Required:

• A favorably adjudicated Tier 1 investigation or an equivalent or higher investigation in accordance with
applicable Army regulations and Homeland Security Presidential Directive-12 (HSPD-12).
• 4+ Years level experience working in government or industry in support of Risk Management Framework
Operations
• Works Business Intelligence experience.
• Previous US Army Corps of Engineers experience will be a plus but not required.

Please forward resume to devin@jamesscottgroup.com for immediate consideration.