Cybersecurity Analyst

CVP is seeing a Cybersecurity Analyst to join our growing team. This Cybersecurity Analyst will assist in the implementation of Zero Trust. 

Responsibilities: 

• Help to implement and refine Zero Trust security strategies and roadmaps based on organizational requirements, industry best practices, and emerging threats.
• Help to convey network segmentation strategies that enforce least privilege access controls and limit lateral movement of threats within the network.
• Assist with the development of workflows to streamline Zero Trust enforcement.
• Collaborate with security architects and engineers to review and enhance the security architecture to align with Zero Trust principles and best practices.
• Develop and maintain detailed repeatable standards and procedures (runbooks) for all cyber security components and processes (e.g., continuous integration/continuous deployment pipeline components, components supporting multifactor authentication)
• Ensure that the policies, procedures, and architecture of Zero Trust are aligned with applicable federal policies and guidelines that govern the implementation of zero trust and overall improvement of cybersecurity operations (e.g. Executive Order (EO) 14028 “Improving the Nation’s Cybersecurity (14028).
• Prepare technology briefs and recommendations for customer stakeholders.
• Assist with the creation and maintenance of cyber security architecture documentation.
• Assist with updates and maintaining the Zero Trust Implementation Plan to include phases and timelines.
• Perform systems analysis of Zero Trust maturity level and collaborate with Tech personnel on recommendations to achieve optimal maturity.
• Provide weekly reports of engineering team progress towards completing the Zero Trust Implementation Plan

Qualifications: 

• Must be eligible to obtain a Public Trust clearance
• Bachelor’s degree in a related field of study.
• 3+ years of experience performing the position's stated areas of responsibility. 
• CompTIA Security + certification or equivalent; highly prefer cloud security certification.
• Knowledge of the following
  • Risk management.
  • Continuous monitoring.
  • Reviewing scan results.
  • Audit log reviews.
  • Change management.
  • Vulnerability management.
  • Incident response.
  • Handling of privacy-related and sensitive data.
• Excellent communication skills with Federal agency stakeholders, including executives, IT teams, and external partners.
• Possess or be able to attain a federal background investigation of Tier 4 Critical Non-Sensitive (Form SF 85P).