Cybersecurity Analyst

Dark Wolf is seeking Cloud Cybersecurity Analyst to join a collaborative team to design, defend, and continuously evaluate the enterprise security architecture and government accreditation posture for critical IT networks through active threat modeling, incident response, continuous audit monitoring, vulnerability remediation, and strict regulatory compliance This position will be based out of  the Washington DC Metro area with hybrid schedule opportunity. Job responsibilities include but are not limited to:

• Utilizing COTS/GOTS and enterprise scanning tools to identify, analyze, and track network, system, and application-level vulnerabilities
• Coordinating with IT teams to support the containment, mitigation, and remediation of identified vulnerabilities and intrusions
• Supporting threat modeling exercises and assisting senior staff in evaluating security incidents to prevent future occurrences
• Assisting in validating established security requirements, assessing operational risks, and recommending baseline safeguards
• Participating in formal Security Test and Evaluation (ST&E) preparations, assist during testing, and aid in drafting post-test analysis reports
• Periodically reviewing system audit logs, tracking open findings, and monitoring corrective action plans until all issues are resolved
• Assisting in configuring, hardening, and maintaining secure operating systems, network access controls, and security applications

Required Qualifications:

• Bachelor’s Degree in Computer Science or related field
• 2-5+ years of relevant Cyber experience
• Experience as a Cyber Analyst, RMF Engineer, ISSO, Information Assurance Engineer, Vulnerability Manager, POA&M Manager 
• Hands-on Tool experience associated to role 
• Experience with NIST 800-53 and CNSSI 1253
• Experience with risk management policies/procedures, to include DODI 8510.01
• Ability to communicate on technical subjects using clear, concise, non-technical language to include strong written communications, ability to provide written feedback on documents, and ability to prepare briefings
• Experience using vulnerability and compliance assessment tools such as Nessus, SCAP, or App Detective
• At least one (1) of the following cyber security certifications: Security+ CE, SSCP, CAP, CISM, CASP, CISSP, GSEC, GICSP, GSLC, CEH, CDNA, CSSLP
• Experience assessing technical environments and translating implemented security controls into clear NIST SP 800-53 control narratives and supporting Authorization to Operate (ATO) documentation