Cybersecurity Analyst III

Everforth ECS is seeking a highly skilled Cybersecurity Analyst to work in Quantico, VA (partial remote).  This position is contingent upon additional funding.

The ideal candidate will be responsible for ensuring the security and integrity of our information systems while implementing best practices in cybersecurity. This role requires a deep understanding of various operating systems, network architecture, and security protocols to protect sensitive data and maintain compliance with industry standards.

Responsibilities

• Develop, implement, and manage security policies, procedures, and protocols to safeguard information systems.
• Monitor network traffic for unusual activity and respond to security incidents promptly.
• Conduct regular security assessments and audits to identify vulnerabilities and recommend remediation strategies.
• Manage user access controls through Active Directory and ensure proper authentication measures are in place.
• Apply RMF in accordance with DoD guidance and manage system lifecycles through eMASS.
• Implement and validate compliance with DISA Security Technical Implementation Guides (STIGs), and ingest to eMASS
• Collaborate with IT teams on system administration tasks, including maintaining operating systems and network infrastructure.
• Oversee cloud computing security measures to protect data stored in cloud environments.
• Implement CI/CD practices to enhance the security of software development processes.
• Provide training and awareness programs for staff on information security best practices.
• Stay updated on the latest cybersecurity trends, threats, and technologies.

• Active Secret Clearance
• Bachelors Degree or minimum 6 years experience
• 3+ years experience in cybersecurity or information assurance in a DoD environment
• Active Security+ or similar certificate, meeting DoD 8570 Level II requirements
• In-depth understanding of DoD RMF, STIGs, and NIST SP 800-53 controls
• Familiarity with DISA compliance tools (e.g., STIG Viewer, SCAP, ACAS)
• Strong knowledge of Windows operating systems and their security features.
• Familiarity with Active Directory management and user access controls.
• Understanding of network architecture and administration principles.
• Experience with incident response planning and execution.
• Knowledge of DHCP configurations and management.
• Proficiency in cloud computing technologies and their associated security challenges.
• Excellent analytical skills with the ability to troubleshoot complex issues effectively.
• Strong communication skills to convey technical information clearly to non-technical stakeholders.