Cyber Security Analyst

Bering-Alaka`ina Holdings, LLC is looking for a Cyber Security Analyst to support our government customer out of Maui, Hawai'i. The Cybersecurity Analyst provides critical cybersecurity and technical advisory services to our customer in Maui Hawaii. This role is responsible for ensuring compliance with Department of Defense (DoD) and Department of the Air Force (DAF) cyberspace workforce requirements, including maintaining necessary certifications and security clearances. Key duties include managing vulnerability remediations, software licensing documentation, and security inspections, as well as maintaining Risk Management Framework (RMF) and COMSEC/SVRO accreditations. Additionally, the analyst supports unclassified, classified, network systems, maintaining high operational availability and security integrity across the Maui sites. DESCRIPTION OF RESPONSIBILITIES: Ensure that personnel accessing information systems have the proper and current Information Assurance (IA) certification to perform administrative functions in accordance with (IAW) DoD Manual 8140.03 / DoDM 8100.03 Cyberspace Workforce Qualification and Management Program, DAFMAN 17-1305, and AFMAN 17-1302-O. Conduct self-inspections on the customers COMPUSEC Program IAW applicable MICT or equivalent checklists. Provide inspection support during Inspector General (IG) cybersecurity and COMSEC inspections at the 15th SpSS. Accept, review, and provide a response to all tickets assigned to the Office within five (5) business days of receipt. Review software management inventories and perform software management reviews of core communications networks IAW AFMAN 17-1203, Chapter 3. Research software for approval to use on core communications networks and monitor the Ports, Protocols, and Services Management Program (PPSM) for NIPRNet and SIPRNet IAW DoD 8551.01 and AFSSI 8551. Monitor and track the Data Loss Prevention Program (USB external storage device process), including ensuring that a Removable Media User Agreement is on file for each user on an approved waiver spreadsheet. Track the request form from receipt through device implementation by the Network Operations Support Center (NOSC), providing a "whitelist" of approved devices to the customer ISSM. Develop and distribute a bi-monthly cybersecurity newsletter and post materials on the IT Support Hub site. Implement vulnerability remediations IAW the DISA Security Technical Implementation Guides (STIG) and Assured Compliance Assessment Solution (ACAS) scans, providing patch management IAW TO 00-33A-1109. Manage the Plan of Actions & Milestones (POA&M) approval process, perform security inspections, analyze results, and recommend corrective actions for network vulnerabilities and STIG non-compliances. Appoint primary and alternate COMSEC Responsible Officers (CRO) and comply with DoD, Air Force/Space Force, and local COMSEC requirements and training, including AFMAN 17-1302-O. Operate encryption devices, perform firmware updates on encryption devices, coordinate periodic/as-needed COMSEC loads, perform courier duties, and complete COMSEC records including inventories, destruction reports, and local coordination sheets. Furnish qualified on-site technicians to provide network vulnerability management, system scanning, network server support, troubleshooting, repair, and Assessment & Authorization (A&A)/Authority to Operate (ATO) documentation for customers communications systems encompassing the operational network. Manage communications systems utilizing approved AIS including Assured Compliance Assessment Solution (ACAS), AFNetOps Compliance Tracker (ACT), System Center Configuration Manager (SCCM), Remote Desktop, Service Now and Remedy Ticketing System. Provide routine scans of security threats and perform corrective action IAW DISA STIGs, TCNOs, and local security guidance. Monitor cyber event tasking in order to detect and mitigate malicious cyber events and coordinate with CFP for resolution of non-advertised TCNOs. Monitor and maintain SCCM server health, ensuring SCCM is operational and prepared for vulnerability patching. Utilize approved AIS to monitor, review, and generate applicable TCNO status listings and report to CFP weekly. Complete cyber network vulnerability management scans across the customers NIPRNet, SIPRNet, and JWICS encompassing all network device Operating Systems (OS) utilizing approved AIS. Monitor vulnerabilities on NIPRNet, SIPRNet, and JWICS network systems using scanning methods IAW local operating procedures. Other duties as assigned by Supervisor. REQUIRED DEGREE/EDUCATION/CERTIFICATION: Must hold a current and verifiable CompTIA Security+ certification. Current Information Assurance (IA) certification to perform administrative functions in accordance with (IAW) DoD Manual 8140.03 / DoDM 8100.03 Cyberspace Workforce Qualification and Management Program, DAFMAN 17-1305, and AFMAN 17-1302-O. Appropriate information system environment certification for information systems with elevated privileges as required by the Government representative. REQUIRED SKILLS AND EXPERIENCE: Minimum of five (5) years’ experience in Information security, cybersecurity, or a related field. In-depth knowledge of security protocols, procedures, and technologies, including network security (firewalls, intrusion detection/prevention systems), cryptography (encryption, decryption), access control (authentication, authorization), and incident response and management. Strong understanding of security frameworks and regulations, such as NIST Special Publication 800-53 (or superseded regulation), DoD Instruction 8500.02 (or superseded regulation), and Risk Management Framework (RMF). Experience using the Enterprise Mission Assurance Support Service (eMASS-NIPR and eMASS-SIPR) to support Risk Management Framework (RMF) steps, including categorization, security control selections, implementation, assessment, authorization, and continuous monitoring. Experience navigating the DISA System Network Approval Process (SNAP) and Global Information Grid Interconnection Approval Process (GIAP) to update entries for network circuits. Proficiency with Assured Compliance Assessment Solution (ACAS), AFNetOps Compliance Tracker (ACT), System Center Configuration Manager (SCCM), Remote Desktop, and Remedy Ticketing System. Experience patching and securing endpoints and network devices IAW DISA STIGs, IAVAs, TCNOs, TCTOs, and APL. DESIRED SKILLS AND EXPERIENCE: Familiarity with NIPRNet, SIPRNet, and JWICS network systems scanning and vulnerability mitigation. Previous experience supporting Command Cyber Readiness Inspections (CCRIs) and Inspector General (IG) visits. REQUIRED CITIZENSHIP AND CLEARANCE: Must be a U.S. Citizen Must have Top Secret/SCI clearance. Bering-Alaka`ina Holdings, LLC is a fast-growing government service provider. Employees enjoy competitive salaries. Eligible employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage; tuition reimbursement; paid time off; and 11 paid holidays. We are an Equal Opportunity/Affirmative Action Employer of individuals with disabilities and veterans. We are proud to state that we do not illegally discriminate in employment decisions on the basis of any protected categories. If you are a person with a disability and you need an accommodation during the application process, we E-Verify all employees. “EOE, including Disability/Vets” OR “Equal Opportunity Employer, including Disability/Veterans” Bering-Alaka`ina Holdings, LLC is comprised of industry-recognized government service firms designated as Alaska Native Corporation (ACN)-owned and 8(a) certified businesses and includes Ke`aki Technologies, LLC; Laulima Government Solutions, LLC; Kūpono Government Services, LLC; Kapili Services, LLC; Po`okela Solutions, LLC; Kīkaha Solutions, LLC; and Pololei Solutions, LLC. For additional information, please visit #LI-JS1 #ClearanceJobs #J-18808-Ljbffr