Senior Cybersecurity Analyst at 579f3dbe-7362-4c54-9324-e9095607244e

Setup: Hybrid
Location: Oklahoma City, Oklahoma · Egg Harbor Township, New Jersey · +1
Type: Full-time
Level: not_specified

Description

OCH Technologies is looking for a Senior Cybersecurity Analyst to conduct independent risk and vulnerability assessments at FAA facilities. This role involves executing assessments using various methodologies like NIST 800-53A, leading on-site test events, and developing detailed reports. The analyst will own assigned systems, collect artifacts, and deliver SARs, supporting a proposal effort contingent on awards and approvals.

Required Skills

Risk Assessments
Vulnerability Assessments
NIST 800-53A
Nessus
WebInspect
nMap
System Security Assessment Reports (SARs)
Plans of Action and Milestones (POAMs)
Regression Assessments
CISSP
GCED
CASP
CISA

Additional Information

Minimum Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, or Physics from an accredited institution
Required Previous Experiences: Eight (8)+ years of hands-on experience conducting security assessments or vulnerability assessments in federal or critical infrastructure environments.
At least 2 years of relevant experience must be recent (performed within the last 3 years).
Preferred Qualifications: Prior experience assessing NAS systems or working at FAA facilities.
Experience with CIS Benchmarks and automated compliance scanning.
Experience assessing cloud environments (FedRAMP, AWS GovCloud, Azure Government).
Familiarity with operational technology (OT) or industrial control system (ICS) security.
Cloud security posture tools (Prowler, ScoutSuite) for assessing AWS GovCloud and Azure Government environments.
OpenSCAP or SCAP Compliance Checker for automated compliance validation against CIS Benchmarks and NIST baselines.
Elastic/ELK or Splunk for log-based assessment analysis and continuous monitoring data review.
AI-assisted documentation analysis tools for accelerating NIST 800-53 control gap identification across system security plans and configuration artifacts.