Cyber Security Analyst III

Job Title Providing expert oversight to maintain continuous compliance through monitoring, validating, and enforcing operational security to ensure EDSO's confidentiality, integrity, and availability Modifying and implementing secure network connectivity between Amazon Web Services and the USMC Evaluating and remediating potential security risks, where identified Evaluating and remediating potential cloud, network, host, application, identity, firewall, load-balancing, WAF, and CI/CD pipeline security risk Supporting DevSecOps pipeline administration, including secure code integration, configuration management, software deployment, vulnerability scanning, dependency scanning, secrets management, and CI/CD security controls Supporting Cloud and network logging, alerting, monitoring, incident response, vulnerability remediation, and continuous compliance activities Coordinating with platform engineers, network engineers, system administrators, developers, mission owners, and customer-support personnel to validate cyber security controls; maintain operational security; resolve cyber security incidents; support system changes; and sustain secure, reliable, and available IL6 cloud services Provides operations and customer support for all services, to include, but not limited to: Operating System Maintenance VPC Configuration Infrastructure as Code Tools Amazon Web Services (AWS) SCCA Network Components (Cisco Routers and F5 devices) SCCA firewall (Palo Alto) Identity and Access Management - Active Directory (AD) Multi-Factor Authentication Intrusion Detection and Intrusion Prevention System (IDS/IPS) Assured Compliance Assessment Solution (ACAS) Microsoft Defender Windows Server Update Services (WSUS) Online Certificate Status Protocol (OCSP) Requirements BS degree in engineering, physical science, physics, network security, computer science 10 years of experience in relevant technical field, to include: technology analysis and assessment, design definition, development of systems specification, systems analysis, systems architecture, systems/equipment integration, test & evaluation criteria Experience with DevSecOps practices, secure CI/CD pipelines, configuration management, infrastructure as code, and secure software-delivery processes Experience with cloud automation, and infrastructure-as-code tools (Ansible, Terraform, CloudFormation, Lambda) Experience with Python, JSON Experience supporting secure cloud networking, network segmentation, routing, firewall policies, and cloud connectivity Experience with Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), continuous monitoring, vulnerability management, and cyber security compliance Experience developing cyber security documentation, operational procedures, security-control evidence, remediation plans, risk registers, and technical reports Ability to identify operational cyber security risks, assess potential mission impact, recommend mitigation measures, and track remediation through closure Amazon Web Services (AWS) experience Five years of technical experience in cyber engineering, network infrastructure, networking, server virtualization, object-oriented programming, software development, software configuration, software installation, or cloud transition, and cyber security Desire to work in a secure lab environment Holds an CompTIA Security+ or higher certification Desired Skills Experience with container security Experience supporting GitLab security capabilities, including code scanning, dependency scanning, secrets management, runner security, auditing, and CI/CD pipeline controls Experience with cloud security logging, monitoring, alerting, incident response, threat detection, and security-event analysis Experience reviewing and validating cloud, network, firewall, WAF, load-balancing, and identity-and-access-management configurations Network experience SAFe (Scaled Agile Framework) Experience Recognized expert who has demonstrated industry and/or public service (e.g., federal, state, or local) Leadership in Information Technology services Experience may be concurrent Clearance Information SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET ELIGIBILITY Travel Requirements Travel one week per quarter to Charleston, SC or Stafford, VA About Us Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients. SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information. EEO Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment. All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law. Scientific Research Corporation endeavors to make accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact View email address on click.appcast.io for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. Scientific Research