Cyber Security Analyst II

Job Description:

The Cybersecurity Analyst II provides mid-level technical cybersecurity support for Cross Domain Solution (CDS) assessments and authorization activities in alignment with National Cross Domain Strategy and Management Office (NCDSMO) guidance. The analyst supports CDSA efforts by conducting technical security reviews, risk assessments, and analysis of multi-domain and multi-level information systems within Department of Defense environments.  

This role requires working knowledge of the Risk Management Framework (RMF), cross-domain architectures, and security control assessment practices.  

Responsibilities:

• Perform cybersecurity analysis in support of Cross Domain Solution (CDS) assessments and authorization activities.  

• Assist in execution of NCDSO/CDSA processes for multi-security domain system evaluations.  

• Conduct technical risk assessments, vulnerability analysis, and attack surface analysis.  

• Review system architectures, data flows, and security controls to identify potential risks.  

• Analyze and review system security documentation, including:  

• System Security Plans (SSPs)  

• Security Assessment Reports (SARs)  

• Risk assessments  

• Architecture diagrams  

• Data flow diagrams  

• Support RMF Assessment and Authorization (A&A) activities.  

• Provide recommendations for security design improvements and risk mitigations.  

• Assist in development of cross-domain security requirements and test procedures.  

• Participate in technical working groups, assessment events, and review boards.  

• Document assessment findings and prepare technical reports for government stakeholders.  

• Coordinate with system engineers, program offices, and cybersecurity teams to resolve security issues.