| 811120 |
Cybersecurity Analyst |
Yakshna Solutions, Inc., (YSI)\ is a CMMI Level 3 assessed, ISO 9001, 20000:1, 27001 certified, woman-owned small business enterprises, headquartered in Herndon, Virginia, USA. YSI provides professional IT solutions and services to business corporations and government organizations. YSI is committed to serve its business communities as a leading IT vendor providing innovative, quality, and cost-effective IT business solutions and services.
We offer a competitive benefits package that includes the following: 401(k), health, dental, and vision insurance, Life insurance, short-term and long-term disability insurance, paid time off, training, and professional development assistance.
YSI is seeking a Cybersecurity Analyst to support federal systems by driving security compliance and vulnerability management. In this role, you will manage the complete lifecycle of Risk Management Framework (RMF) packages, execute continuous monitoring, and ensure systems meet rigorous security standards.
Responsibilities:
- Provide technical engineering and implementation of security solutions. This includes designing and managing vulnerability scanning architecture, engineering the Security Information and Event Management (SIEM) solution, integrating security testing into the development pipeline, defining secure configuration baselines, and developing technical documentation for security architecture.
- Guide security packages through all seven steps of the NIST Risk Management Framework (RMF)-from initial categorization and security control implementation through continuous monitoring.
- Develop system Authorization and Accreditation (A&A) packages using eMASS and assist in system categorization, STIG applicability, and SSP development. RMF documentation, including Risk Assessment Reports (RARs), Security Assessment Reports (SARs), and POA&Ms, will be prepared and submitted to the Authorizing Official (AO).
- Assist with implementing and monitoring security controls, documenting findings, and tracking remediation activities through the Plan of Action and Milestones process.
- Establish and maintain a comprehensive vulnerability management program to continuously identify, assess, and remediate vulnerabilities across AFOSI networks and applications using tools like ACAS (Tenable) or HBSS/McAfee; track, triage, and remediate findings to reduce organizational risk.
- Implement, audit, and validate DISA Security Technical Implementation Guides (STIGs) across servers, workstations, and network infrastructure.
- Maintain up-to-date compliance tracking, hardware/software baselines, and artifact uploads using the Enterprise Mission Assurance Support Service (eMASS).
- Utilize tools such as STIGMan, LanSweeper, SCAP, and SIEM platforms to support incident response, configuration management, and daily security posture assessments.
Required Skills and Qualifications:
- At least 5 years of experience in cybersecurity/Information Assurance (IA), including relevant experience in vulnerability management, RMF implementation, software certification, SIEM, incident response, and configuration/change management.
- Experience with the NIST Risk Management Framework (RMF). Employees should have practical experience with moving a system/RMF package through all steps from categorization to continuous monitoring.
- Experience creating/updating System Security Plans (SSP), Risk Assessment Reports (RAR), and Security Assessment Plans (SAP) and managing POA&Ms.
- Practical knowledge of implementing and auditing DISA Security Technical Implementation Guides (STIGs) on servers, workstations, and network devices.
- Hands-on experience with tools such as ACAS, eMASS, STIGMan, LanSweeper, SCAP, and SIEM platforms.
- Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related discipline; equivalent professional experience will also be considered.
- 3 years of experience in Systems/Network Administration
- Experience in PowerShell, Active Directory, and RHEL administration
- Must be certified at DoD 8140 IAT Level II or higher certification.
Must have a TS/SCI clearance or be SCI eligible.
Salary Range: $90,000-100,000 annually with benefits
U.S Citizen or Green card holder only
YSI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
|