Cyber Security Analyst

Cyber Security Analyst

Trowbridge and Trowbridge (T&T) has an immediate opening for a Cyber Security Analyst to provide Certification and Accreditation (C&A) support to the Department of Energy (DOE) Office of Health, Safety and Security (HSS) located in Germantown, MD.

The individual we seek will develop and/or evaluate C&A documentation for HSS for both classified and unclassified systems in accordance with NIST SP 800 series and the Office of the Chief Information Officer (OCIO) Program Cyber Security Plan (PCSP).

This individual will conduct Security Test and Evaluations (ST&Es) and develop supporting documentation of test results. Will assist the Certification Agent (CA) with documentation reviews and provide technical expertise when necessary.

Will interface directly with all levels of federal management, system owners, administrative personnel, and highly technical cyber analysts to monitor and assess all phases of C&A. Will assist the technical team and/or customer with technical testing activities during off-hours upon request. Performs vulnerability scans and Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) audits and analyzes/interprets scan results reports.

Job Requirements:

• BS in Information Technology, Security or Engineering with 5 or more years of experience; or an equivalent combination of education and work experience.
• 3+ years in cyber security implementing C&A process using NIST Guidance (SP 800 series); specifically conducting ST&E's .
• Experience in preparing C&A packages.
• Strong skills in technical writing, verbal communication, problem analysis and resolution.
• Broad knowledge of IT security best practices.
• Demonstrable knowledge of NIST Special Publications associated with the C&A process is required (eg, SP 800-18, 30, 37, 53 rev 2, 3, and 53A).
• Strong organizational, planning and analytical skills.
• Excellent verbal and written communication skills.
• Familiarity with vulnerability scanners (eg, Nessus) and other related Information Assurance (IA) and C&A tools and processes.

Desired:
Master's Degree in Information Technology, Security or Engineering

Security Certifications:
CISSP, CISA, CISM, or CAP

T&T is an Equal Opportunity Employer.