Position: Cybersecurity Analyst/Information Assurance (TS/SCI)

Functional Labor Category: Enterprise Knowledge Management

Location: Tampa, Florida 33621; multiple locations domestic and international

Minimum Security Clearance: TS/SCI

RedSky is seeking a Cybersecurity Analyst/Information Assurance (Secret/TS) to support the overall mission of the Department of Defense (DoD) by focusing on knowledge management, information sharing, collaboration, data, business processes, and digital capabilities. This effort provides significant opportunities for an upcoming program.

Responsibilities:

As a Cybersecurity Analyst/Information Assurance (Secret/TS), you will be the bridge between the technical team that builds and operates Enterprise Knowledge Management and the government's security authorization framework. You will ensure that every system, application, platform, and data asset within the EKM program operates within an approved security boundary and maintains continuous compliance with DoD cybersecurity mandates.

Required Skills/Qualifications:

• ACTIVE Secret/TS clearance
• Five (5+) years supporting Risk Management Framework (RMF) per NIST SP 800-37and DoDI 8510.01 in a DoD environment
• Three (3)+ years of experience supporting full ATO lifecycle — categorization, security control selection, implementation, assessment, authorization, continuous monitoring
• Three (3)+ years of experience applying DISA Security Technical Implementation Guides (STIGs) across the Enterprise Knowledge Management technology stack: M365 (Exchange Online, SharePoint Online, Teams, OneDrive), Windows Server, SQL Server, Azure, Active Directory / Entra ID, IIS, .NET, and custom web applications
• Three (3)+ years of experience identifying STIG findings and remediate or document mitigations
• Three (3)+ years of experience preparing for support and remediation findings from Command Cyber Readiness Inspection; (vulnerability management, configuration management, IAVM compliance, account management, physical security)
• Three (3)+ years of experience running CCRI dry runs conducting internal compliance reviews; internal audits of vulnerability scan results, STIG compliance, account reviews, privileged access audits, IAVM patch status, and documentation completeness
• Three (3)+ years of experience tracking, reporting, and managing CCRI remediation plans progress
• Three (3)+ years of experience tracking and enforcing Information Assurance Vulnerability Management (IAVM) directives achieving and maintaining 100% IAVM compliance — IAVAs, IAVBs, IAVMs
• Three (3)+ years of experience with Microsoft Defender for Office 365, Defender for Endpoint, Defender for Cloud Apps, and Microsoft Sentinel in GCC High / IL5-IL6; security baseline configuration; attack simulation
• Two (2)+ years of experience writing comprehensive SSPs for enterprise-scale systems-of-systems; DoD-formatted SSPs with complete control implementation narratives
• Two (2)+ years of experience producing monthly security status reports, CCRI readiness dashboards, IAVM compliance reports, POA&M aging reports, and executive risk summaries
• CompTIA Security+ certification
• CySA+ certification
• GICSP certification
• GSEC certification
• SSCP certification

RedSky LLC is an equal opportunity employer. Our policy is to provide fair and equal employment opportunities for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. RedSky hires and promotes individuals solely based on their qualifications for the job to be filled.  RedSky believes that associates should be provided with a working environment that enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability.

We expect and require the cooperation of all associates in maintaining a discrimination and harassment-free atmosphere.