Cybersecurity Analyst
Summary
TIAG is hiring a full-time, 100% onsite Cybersecurity Analyst in Arlington, VA (active Secret Clearance required) to monitor systems for threats, run risk and vulnerability assessments, track DISA STIG compliance, support RMF A&A and POA&M processes, and assist with incident response and audits.
TIAG is now hiring a Cybersecurity Analyst to join our team full time in Arlington, VA. The position is 100% onsite in Arlington and requires an active Secret Clearance to start work.
- Responsibilities include:
- Continuously monitors information systems for security threats, vulnerabilities, and breaches. Utilize security tools to analyze alerts and take appropriate action.
- Conducts regular risk assessments and vulnerability analyses to identify potential security weaknesses and recommends remediation strategies.
- Utilize DISA STIG Viewer to assess, document, and track system compliance with Security Technical Implementation Guides (STIGs), including performing checklist reviews, recording findings, and generating compliance reports.
- Supports the Assessment and Authorization (A&A) process as part of the Risk Management Framework (RMF) for multifaceted systems, networks and enclaves.
- Assists with risk mitigation through management of the Plan of Action and Milestones (POA&M) process. Verifies actions taken by internal IT support teams satisfy risk mitigation.
- Assists in the development and implementation of information assurance policies and procedures to ensure compliance with organizational and regulatory requirements.
- Support incident response efforts, including investigating security incidents, documenting findings, and coordinating with relevant teams for remediation.
- Maintains accurate documentation of security incidents, assessments, and compliance activities for audit and reporting purposes.
- Participates in internal and external audits to assess compliance with security policies and regulatory requirements; provide recommendations for improvement.
- Works closely with IT staff and other departments to ensure that security measures are integrated into system development and operational processes.