Job Description
Overview
Cybersecurity Analyst Team Lead (MCESS):
Bowhead seeks a Cybersecurity Analyst Team Lead to support the Marine Corps Electronic Security Systems (MCESS) Integrated Project Team in Charleston, SC.
Responsibilities
Essential Duties Include:
- Serve as the Team Leader leveraging over fifteen (15) years of government contracting experience and military leadership to oversee Information Security Continuous Monitoring (ISCM) and User Activity Monitoring (UAM).
- Oversee and manage customer quality assurance requirements, drawing on experience in planning, organizing, and controlling safety and maintenance activities to ensure quarterly goals and project milestones are met.
- Oversee and manage the training program to ensure compliance with the Workforce Training Plan and DOD requirements, such as DOD 8570.
- Oversee and manage compliance requirements for Endpoint Security Solutions (ESS) and ensure alignment with JFHQ-DODIN requirements, DISA STIGs, and Security Requirements Guides (SRGs).
- Maintain and update procedural documentation, including Standard Operating Procedures (SOPs), System Security Plans (SSP), and program policies.
- Conduct continuous network monitoring and analysis using Tenable/Nessus Security Center and Assured Compliance Assessment Solution (ACAS).
- Enumerate vulnerable terrain and provide customers with assessment reports featuring prioritized mitigation actions based on NIST Risk Management Framework (RMF) standards.
- Track vulnerability management efforts from identification to remediation, including the management of Plans of Action and Milestones (POA&M).
- Analyze risk score trends and anomalies, utilizing tools like SCAP Compliance Checker and Evaluate-STIG to ascertain root causes.
- Validate network scanning quality and compliance using ACAS Security Center and assist subscribers in the deployment of Nessus agents.
- Troubleshoot credentialed scanning failures and provide remediation guidance to technical teams and Subject Matter Experts.
- Research emerging threats and share matching indicators of compromise (IOC) to support incident response and the Insider Threat Program.
- Provide quality customer service with excellent written and oral communication, drawing on a background of providing technical consultations to commanders and functional managers
Qualifications
- BA/BS in Information Systems Management; Computer Science or related discipline.
- Must have ten years (10) years of information security experience and fifteen (15) years in government contracting environments.
- Proven ability to lead teams in high-stress, real-world mission environments, including coordinating with Government and Contract support.
- Expert knowledge of NIST RMF, eMASS, ACAS, and DISA STIG/SRG compliance.
- At least two (2) years of intrusion detection and network monitoring experience.
- Must have a IASAE Level II certification (CISSP)
Highly Desired Certifications:
- DOD 8570 IAT Level II: CompTIA Security+ CE.
- DOD 8570 CSSP-Analyst: CompTIA Cybersecurity Analyst (CySA+ CE) and CompTIA Security Analytics Professional (CSAP).
- Computing Environment: DISA Assured Compliance Assessment Solutions (ACAS).
Physical Demanads:
- Must be able to lift up to 25 pounds
- Must be able to stand and walk for prolonged amounts of time
- Must be able to twist, bend and squat periodically
SECURITY CLEARANCE REQUIREMENTS: Must obtain and maintain a Secret clearacne. US Citizenship is a requirement for a Secret clearacne for this location.
#LI-JR1
