What are the responsibilities and job description for the Cyber Security Analyst - Now Hiring position at Octo Consulting Group?
Cyber Security Analyst
Location: All LocationsReq#: 604518
Company Information
Octo, an IBM company, is an industry-leading, award-winning provider of technical solutions for the federal government. At IBM/Octo, we specialize in providing agile software engineering, user experience design, cloud services, and digital strategy services that address government's most pressing missions. IBM/Octo delivers intelligent solutions and rapid results, yielding lower costs and measurable outcomes.
Our team is what makes Octo great. At Octo you'll work beside some of the smartest and most accomplished staff you'll find in your career. Octo offers fantastic benefits and an amazing workplace culture where you will feel valued while you perform mission critical work for our government. Voted one of the region's best places to work multiple times, Octo is an employer of choice!
You...
As a Cyber Security Analyst at Octo, you will help support the design, development, and delivery of enterprise-level security solutions for a federal client. The ideal candidate will have experience in all aspects of IT Security with a vast array of IT systems involving end-user as well as enterprise-level networks. They will have experience in Identifying, addressing, and analyzing the potential for technical failures, malicious attacks, single points of failure that impact the confidentiality, integrity, and availability of a system.
Us...
We were founded as a fresh alternative in the Government Consulting Community and are dedicated to the belief that results are a product of analytical thinking, agile design principles and that solutions are built in collaboration with, not for, our customers. This mantra drives us to succeed and act as true partners in advancing our client's missions.
Program Mission...
The Digital Transformation Center (DTC) supports Veterans Affairs (VA) with onboarding and maintaining enterprise SaaS and PaaS solutions used to support the mission of serving our Veterans and their associated stakeholders. We are digitizing information and processes for improved implementation, leveraging modern tools and low code/no code for reusability and faster delivery.
Responsibilities…
- Works to maintain ATOs for SaaS, PaaS, and Add-On products throughout their product lifecycle.
- Maintain Plan of Action & Milestone (POA&M) for the SaaS, PaaS product through the remediation and Mitigation efforts.
- Assist with identifying and supporting what changes or processes will satisfy the organization's security requirements.
- Supporting technical solutions that address vulnerability findings and security gaps.
- Analyzing current system designs and requirements to ensure all current systems and system updates meet goals and expectations.
- Evaluating information security technologies and create recommendations and plans for implementation.
- Applying experience and knowledge of NIST Risk Management Framework (RMF) and how federal agencies apply this to secure their information systems.
- Applying experience and knowledge with Assessment and Authorization (A&A) including Authority To Operate (ATO) packages and its alignment with RMF processes.
- Conduct compliance reviews to ensure all products developed are in accordance with VA security standards. Perform qualitative assessment of current Cloud Computing Frameworks particularly as it relates to security in cloud environments.
Requirements...
- Bachelor's Degree OR 4 years of related work experience.
- Must have at least 5 years of related security experience, preferably for a federal or government agency.
- Requires strong analytical and organizational skills to include strong attention to detail.
- Strong interpersonal skills and ability to work collaboratively in a dynamic team environment.
- Excellent communication and technical documentation skills.
- Ability to read technical documentation and identify alignment and/or conflict with process requirements and policies. Ability to translate these findings into customer communications along with action-items to resolve potential issues.
- Ability to prioritize and work on multiple projects and initiatives simultaneously and adapt to changing priorities and tight deadlines.
- Superb soft skills including the ability to gain the trust of stakeholders and senior management and negotiate priorities with external teams
- Working knowledge of eMASS or similar systems.
- Experience with product management tools and practices, can interface directly with product teams to assign work/influence backlog for security needs
- Ability to articulate security control-level concerns to both technical and non-technical audience
Desired Skills:
- Experience supporting Department of Veterans Affairs (VA) and/or other federal organizations.
- Experience hands on network security to include security controls, network architecture and vulnerability management.
Years of Experience: Must have at least 5 years of related security experience, preferably for a federal or government agency.
Education: Bachelor's Degree OR 4 years additional years of work experience.
Location: Fully Remote within the United States.
Clearance: Ability to obtain a Public Trust security clearance.
Octo is an Equal Opportunity/Affirmative Action employer. All qualified candidates will receive consideration for employment without regard to disability, protected veteran status, race, color, religious creed, national origin, citizenship, marital status, sex, sexual orientation/gender identity, age, or genetic information. Selected applicant will be subject to a background investigation.
Octo is an IBM subsidiary which has been acquired by IBM and will be integrated into the IBM organization. Octo will be the hiring entity. By proceeding with this application, you understand that Octo will share your personal information with other IBM affiliates involved in your recruitment process, wherever these are located. More Information on how IBM protects your personal information, including the safeguards in case of cross-border data transfer, are available here: ".
