AAC is seeking an experienced Cyber Security Analyst to support our federal contracting client with cyber related activities including stakeholder management, vulnerability research, coordination with the system engineers and ISSO’s.

In this role you will:

• Lead mitigation / remediation process, following approved corrective action plans
• Support program to ensure appropriate implementation of the NIST Security Framework through the lifecycle of the system including but not limited to the pre-security assessment tasks and coordination with System Owners (SO)
• Responsible for coordinating with internal stakeholders and external vendors to gather requirements and execute cyber related tasks
• Coordinate and facilitate pre-assessment meetings with stakeholders
• Experience integrating diverse data streams and perform detail analysis
• Establishes data standards and acts as custodian of IT security and service delivery data sets and streams
• Experience analyzing complex networks and systems from a security standpoint
• Experience analyzing log data from various network components and operating systems as well as packet capture data
• Support process improvement and special project activities requiring engagement and collaboration with a variety of functional teams
• Applying auditing techniques for identifying problems
• Responding to data calls by gathering and analyzing pertinent information, forming conclusions, developing solutions and implementing plans
• Create, document, review and edit as appropriate (new and existing) system security documents for completion and accuracy (to include but not limited to SCD, SSP, SIA, PIA, PTA, POA&M, Disaster Recovery Plan/DRP, etc.) to ensure security requirements are included

Required Education, Experience, & Skills

• 5-7 years of experience working on IT security protocols and RMF Framework
• Bachelor's degree
• A Certified Authorization Professional (CAP) or Systems Security Certified Practitioner (SSCP) while progressing toward a senior certification of CISSP and/or CISA
• Experience with JIRA
• Proficient in Microsoft Office suite of tools including SharePoint; aptitude for quickly learning related tool sets

Preferred Education, Experience, & Skills

• Security Development and Operations (SecDevOps)
• Expertise with Splunk
• Scripting tools to include Python, ShellScript, or Ansible
• Cloud security controls and implementation
• PKI implementation
• STIG compliance and vulnerability management
• Virtualization experience (VDI & VMWare)
• Public, private and hybrid Cloud experience (AWS, Microsoft Azure, etc.)
• CISSP
• AWS Certified Security Specialty
• Microsoft Office365