SYSTEMS SECURITY ANALYST (CYBER)

Overview:

Quantum Research International, Inc. (Quantum) provides our national defense and federal civilian and industry customers with services and products in the following main areas: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air and Missile Defense, and Fires Support Systems; 5) Intelligence Programs Support; 6) Experimentation and Test; 7) Program Management; and (8) Audio/Visual Technology Applications. Quantum's Corporate Office is located in Huntsville, AL, but Quantum actively hires for positions nationwide and internationally. We pride ourselves on providing high quality support to the U.S. Government and our Nation's Warfighters. In addition to our corporate office, we have physical locations in Aberdeen, MD; Colorado Springs, CO; Crestview FL; and Tupelo, MS

Mission:

Quantum Research is seeking an experienced Security Systems Analyst. As a member of the National Geospatial-Intelligence Agency (NGA) Defender Cross Domain Governance team, the contractor supports the Cross Domain Support Office (CDSO) which governs delivery of cross domain capabilities at mission speed, defends NGA's classified networks, enables federated cross domain services, and develops cross domain expertise throughout NGA. The ieal candiate shall support the development and maintenance of a Government approved NGA Cross Domain Strategic Plan that includes an Enterprise Cross Domain Service (ECDS) Provider Roadmap, NGA Cross Domain Consolidation Plan, and CDSO Communications Plan. This position is onsite (no remote/hybrid option) and available immediately in Springfield, Virgina.

Responsibilities:

• Perform architectural and engineering analyses of existing and proposed Cross Domain requirements and systems to determine feasibility, impacts to the risk posture, benefits to the mission, and adherence to Enterprise Cross Domain Service (ECDS) Provider Roadmap and Cross Domain Consolidation Plan.
• Support the development, maintenance, and implementation of a Government approved Cross Domain Support Office Governance CONOPS with a common, reusable framework for governing all Cross Domain systems.
• Provide technical support to the Cross Domain Support Office by reviewing new or modified Cross Domain Solution (CDS) requirements.
• Maintain a comprehensive inventory, technical summary, and common operating picture of all Cross Domain connections and data flows.
• Assess proposed Cross Domain solutions for technical feasibility and potential impacts to NGA risk posture.
• Support Risk Management decisions for all Cross Domain Solutions by providing CDS expert informed security and risk assessments and recommendations.
• Perform cybersecurity testing and properly document all systems security implementation, operations, and maintenance activities and update as necessary.
• Leverage coding and scripting familiarity to perform technical reviews of custom filter logic, rule sets, and deep content inspection configurations. Validate that software-based data controls function as intended to block malicious or malformed data.    

Requirements:

• TS/SCI eligible, subject to CI Polygraph
• Bachelor's in a relevant degree such as Cybersecurity, Information Systems, Information Technology, Computer Science, etc. In lieu of degree, relevant experience plus CISSO, CISSP-ISSEP, RCCE Level 1, CySA+, FITSP-O, GCLD, GCSA, or GSNA may be accepted. Relevant years of experience may be accepted in lieu of degree or certification.
• Knowledge of computer networking concepts and protocols, network security methodologies, and risk management processes (e.g., methods for assessing and mitigating risk).
• Experience with laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Expertise with assessing the impact of cyber threats and vulnerabilities and the potential impacts of cybersecurity lapses.
• Expertise with computer algorithms, encryption algorithms, cryptography and key cryptographic management concepts, database systems, and human-computer interaction principles.
• Experience with network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML), operating systems, and how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
• Practical ability to read and analyze code or scripts (e.g., Python, Bash, PowerShell, VSCODE, or similar languages/IDEs) to evaluate custom filter behavior, assess software logic, and ensure proposed engineering solutions meet governance standards..
• Knowledge/Experience with cloud technologies.
• Understand schema validation

Desired Skills and Qualifications:

• Technical familiarity with the design, operation, and security constraints of industry-standard Cross Domain Solutions

• Experience with data visualization and dashboarding tools.

Certifications:

Applicable Certifications include but are not limited to any of the following:

• CISSO, CISSP-ISSEP, RCCE Level 1, CySA+, FITSP-O, GCLD, GCSA, or GSNA may be accepted

#LI-JL1 #Onsite

Equal Opportunity Employer/Affirmative Action Employer M/F/D/V: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity, or any other characteristic protected by law. *Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.