Cyber Vulnerability Analyst (Encryptor Specialist)
About the position Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Cyber Vulnerability Analyst (Encryptor Specialist) with a TS/SCI security clearance to support KPS and our government customer in Falls, Church, VA. We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more. We are seeking a highly skilled and motivated Cyber Vulnerability Analyst to support the government support team. This role is responsible for implementing protections of government network infrastructure, with a specialized focus on identifying, analyzing, and mitigating vulnerabilities associated with various HAIPE (High Assurance Internet Protocol Encryptor) hardware and other network systems. The ideal candidate will assess systems against established policies, measure the effectiveness of our defense-in-depth architecture, and help ensure the integrity of data networks.
Responsibilities
- Conduct comprehensive vulnerability assessments of systems and networks to identify deviations from security policies and standards.
- Utilize industry-standard scanning tools (e.g., Nessus, Qualys, Rapid7) to identify and analyze security risks.
- Configure, manage, and troubleshoot encryption devices to ensure secure and reliable operation.
- Analyze and respond to digital evidence and threat intelligence to mitigate system and network vulnerabilities effectively.
- Assess and vet findings from vulnerability disclosure programs (VDP) to prioritize and remediate security risks.
- Ensure all network components and configurations are in compliance with Department of Defense (DoD) security standards and organizational policies.
- Develop and maintain cybersecurity indicators to provide awareness of the current threat landscape and the status of the operating environment.
- Collaborate with network engineers and system administrators to implement remediation plans and strengthen security posture.
Requirements
- Must possess an active Secret or Top Secret/SCI security clearance.
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field with 3+ years of relevant experience, OR
- Associate's degree with 5+ years of relevant experience.
- Minimum of CompTIA Security+ or an equivalent DoD 8570 baseline certification.
- Demonstrated experience with the configuration and maintenance of TACLANE devices or similar NSA-certified Type 1 encryption hardware.
- Strong understanding of IP networking protocols, VPNs, and network security architecture.
- Experience with GEM One encryptor management tools.
- Current understanding of industry best-practices for network architectures and security
Nice-to-haves
- In-depth knowledge of cybersecurity frameworks such as NIST, CVSS, and MITRE ATT&CK.
- Familiarity with commercial (e.g. Cisco, Juniper, etc) routers, switches, and security appliances.
- Experience in collecting, analyzing, and disseminating cybersecurity threat assessments.
- Prior experience working within a Department of Defense (DoD) or government contracting environment.
- Familiarity with DoD Instruction 8523.01 and related guidance, preferably with prior experience within the Communications Security (COMSEC) subject area
Benefits
- health, dental and vision insurance
- 401K with company matching
- flexible spending accounts
- paid holidays
- three weeks paid time off