Intermediate Cyber Security Analyst

ASRC Federal Business Innovation, LLC is a premier provider of systems engineering, software engineering, system integration and project management services for real-time, mission-critical defense systems. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™.

We are seeking a motivated Intermediate Cybersecurity Analyst to provide support for our Secretary of the Air Force / Office of Competitive Activities (SAF/OC) customer. The Cybersecurity Analyst supports cybersecurity requirements to protect US classified systems in foreign partner locations. Some Travel is required.

Responsibilities
• Responsibilities include security documentation preparation, security engineering analysis and document review, security requirements traceability, and system compliance reports as directed by the DoD and MPCO Cybersecurity authorities and the ISSM.
• Participates in activities and supports development of required documentation for initial and subsequent Assessment and Authorization (A&A) activities.
• Supports of the Risk Management Framework (RMF) for DoD IT packages for delivery as prescribed by the DoD MPE Authorizing Official (AO). Populate A&A templates per RMF for DoD IT requirements in support of the ISSM.

Requirements
• Active Top Secret security clearance with SCI Eligibility
• Education: BA/BS or higher
• Ten (10) years’ of Cybersecurity experience. Qualifying experience includes the following activities:
▪ Threat Detection & Monitoring
▪ Analyzing logs and alerts from SIEM (Security Information and Event Management) systems.
▪ Monitoring network traffic for unusual patterns or suspicious activity
▪ Incident Response
▪ Investigating and respond to security breaches in real time.
▪ Assisting in detecting, reporting, and responding to security incidents.
▪ Writing detailed incident reports
▪ Coordinating recovery efforts with Security Operations Centers (SOCs) and other stakeholders
▪ Vulnerability Management
▪ Conducting regular risk assessments and penetration tests.
▪ Identifying and fixing security flaws in systems, applications, and networks.
▪ Security Infrastructure Maintenance
▪ Installing and managing firewalls, antivirus software, and encryption tools.
▪ Ensuring systems are patched and updated to prevent exploitation.
▪ Ensuring systems comply with federal, state, and organizational security requirements
▪ Overseeing ongoing assessment of security controls.
▪ Ensuring timely updates and patches to maintain system integrity
▪ Policy and Compliance
▪ Participates in activities and supports development of required documentation for initial and subsequent Assessment and Authorization (A&A) activities
▪ Developing and enforce security policies and best practices.
▪ Tracking metrics like mean time to detect/respond and patch compliance.
▪ Maintaining System Security Plans (SSPs), Risk Assessments, and Plan of Action and Milestones (POA&Ms).
▪ Documenting security controls and ensuring they’re properly implemented.
▪ Ensuring systems meet standards like NIST, FISMA, FedRAMP, or ISO 27001.
▪ Preparing for and supporting audits and security inspections
▪ Education and Awareness
▪ Training staff on cybersecurity protocols, phishing awareness and best practices
▪ Creating reports for technical and non-technical stakeholders.
▪ Threat Intelligence
▪ Staying updated on emerging threats and attack vectors.
▪ Researching malware, ransomware, and other evolving cyber risk
Schedule
• You can flex time during the 2 week pay cycle - avoid using PTO for appointments

Why ASRC?
As a wholly owned subsidiary of Arctic Slope Regional Corporation, an Alaska Native Corporation, we are inspired by the Iñupiat culture. We embrace stewardship and the idea of using every resource effectively; teamwork when striving to achieve goals and building a collaborative environment; integrity in adhering to high moral principles and professional standards; respect in welcoming and regarding the differing opinions, experiences, rights and traditions of others; accountability in that we meet our commitments and take responsibility for our results; and continuous improvement, always striving to make things better, raising the bar and staying humble.

Advantages of Working at ASRC Federal:
• Purpose-Driven Careers: Join a company recognized as a:
◦ Certified Great Place to Work
◦ Military Times’ Best for Vets Employer
◦ Military.com’s Top 25 Veteran Employer

• Comprehensive Benefits:
◦ Insurance Coverage: Comprehensive plans for medical, dental, vision, life insurance, and short-term/long-term disability
◦ Paid Leave: Inclusive policies for bereavement, military obligations, and parental needs, along with 11 paid holidays annually
◦ Retirement Savings: A 401(k) plan with a generous company match and immediate vesting to help secure your financial future
◦ Incentives: Employee referral bonuses to reward you for helping grow the ASRC Federal Family

• Learning and Development:
◦ After 90 days of employment, regular full-time employees are eligible for our professional development program. This includes annual funding for:
◦ Pursuing Associate’s, Bachelor’s, or Graduate Degrees
◦ Obtaining industry-standard professional certifications
◦ Participating in professional certificate programs
◦ Covering registration fees for professional conferences

• Centers of Excellence: We established the Centers of Excellence to build, leverage and grow our technological capabilities, best practices and offer professional development for our technical teams. They contain many Communities of Practice which are forums that offer a platform to share ideas, best practices, innovations, and to collaborate with technical peers.

Embark on a career with ASRC Federal Business Innovation, LLC, where your growth, purpose, and well-being are at the forefront of what we do!