Cybersecurity Metrics and Data Analyst (SME)

Job Description

Job Description

Contract Labor Category (LCAT): Cybersecurity Metrics and Data Analyst Subject Matter Expert (SME)

Position: Cybersecurity Metrics and Data Analyst (SME)

Clearance: Secret

Location: Fort Belvoir, VA

Salary:

Type: Exempt, Full Time, Regular

Description

The Cybersecurity Metrics and Data Analyst SME will have expertise in data engineering, data visualization, and cybersecurity reporting. This role is responsible for the complete lifecycle of cybersecurity metrics development, from data source identification and ingestion to the creation, maintenance, and analysis of interactive reports and dashboards using tools such as Microsoft Power BI. The analyst will work with the CPE ES2 Cybersecurity office to transform raw data from various DoW/Army systems into actionable intelligence that provides clear visibility into the cybersecurity health and compliance of the entire portfolio.

Duties and Responsibilities

• Identify, connect to, and establish data pipelines from key cybersecurity data sources, including, but not limited to, eMASS, ACAS, Army Enterprise Service Management Platform (AESMP), and other relevant system inventories and repositories
• Develop and manage automated data ingestion processes, ensure data is refreshed on a recurring basis to provide a near real-time view of the security posture and troubleshoot and resolve any data connection or pipeline failures
• Support the government in establishing data quality and governance standards and profile and validate incoming data to ensure its accuracy and integrity before it is used in reports
• Ingest and transform raw, multi-source data into a clean, efficient, and scalable data model within Power BI
• Create relationships, measures (DAX), and calculated columns necessary to support reporting requirements
• Design, build, and deploy a suite of interactive Power BI dashboards and reports that visualize key performance indicators (KPIs) for cybersecurity health and reports shall cover, at a minimum:

• RMF package status and authorization timelines
• POA&M status, age, and risk levels
• Vulnerability status from ACAS scans (e.g., IAVAs, Critical/High findings)
• STIG compliance rates
• Security control status
• Cyber Tasking Order (CTO) compliance status

• Ensure all dashboards are designed with a clean, intuitive user interface and employ data visualization best practices to make complex data easily understandable for a leadership audience
• Proactively analyze the data presented in the dashboards to identify trends, patterns, anomalies, and areas of high risk and provide a weekly written summary of key data-driven insights and recommendations to the P-ISSM
• Manage the Power BI workspace, including app publication, user access, and dataset/report maintenance and perform regular reviews to optimize the performance of the data models and reports
• Work with government stakeholders to gather new reporting requirements and translate them into technical specifications and create and maintain documentation for all data models, reports, and processes

Required Qualifications

• Bachelor’s Degree and 12+ years of relevant experience, with at least 4 years focused on data analysis, data engineering, or business intelligence
• Demonstrated expert-level proficiency with Microsoft Power BI, including Power Query, DAX, and data modeling
• Experience connecting to and ingesting data from various sources, including APIs, SQL databases, and file exports (CSV, JSON, XML)
• Experience with cybersecurity frameworks (e.g., RMF, NIST) and a strong understanding of cybersecurity data from tools like eMASS and ACAS
• Experience in a cybersecurity or data analysis role within a DoD or Army environment
• Security+ Certification
• Must possess and maintain a Secret security clearance

If you require a reasonable accommodation for any part of the application or hiring process, please notify the Director of People Operations. Reasonable accommodations are provided to qualified individuals with disabilities in accordance with applicable law.