Cyber Security Risk Analyst

About the role

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation.

We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel - and the knowledge that outstanding effort is recognized and rewarded.

The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we've described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.

About the role

Work Location

Required onsite work at the client location at Scott Air Force Base, Illinois with situational telework only

About the role

Electrosoft Inc. is seeking a Cyber Security Risk Analyst (CSRA) who can help support the creation and visualization of metrics to support decisions and reduce threats across the Enterprise. The ideal candidate will provide expertise with the implementation of "Metrics that Matter" to assist the client in meeting the requirements to address Risk Management Framework (RMF) and Vulnerability Management to on-premises and Cloud networks. Additionally, they will assist in integrating systems and data while securing the environment against evolving Cybersecurity threats and modernizing to achieve mission success.

Duties & Responsibilities

The CSRA will assist in design of innovative solutions and services to support our team and customer in improving our collection and visualization of metrics to support Vulnerability Management (VM), Risk Management Framework (RMF) and to address various Cyber Security Service Provider Inspection requirements to improve the overall risk assessment, better understand performance, improve situational awareness and facilitate the enhanced cyber security posture.

Ultimately providing for potential interoperability between current systems and ensuring timely decision making based on near real-time data availability through data analytics and product development. Additionally, the CSRA shall utilize skills in DoD computing, networking/transmission, cybersecurity policy, and data analytics to:

• Develop meaningful and actionable metrics, to include Key Performance Indicators (KPI) and Key Risk Indicators (KRI), as directed by the Government
• Integrate metrics with cyber readiness framework
• Analyze and define data requirements and specifications
• Develop data model(s), integrations, and analytics to enhance cyber readiness assessment and to enable decision support
• Conduct queries to analyze data sets
• Conduct trend analysis to identify systemic security issues by analyzing vulnerability and configuration data
• Analyze future eMASS changes, to include the altering or addition of new data elements and advise product stakeholders, propose solutions, and initiate preventative or corrective action as determined by the stakeholders.
• Monitor health of daily ingests, advise stakeholders when ingest operations are degraded, and propose corrective actions during periods of ingest degradation or failure.
• Perform Extract, Transform, and Load (ETL) Operations
• Accomplish data ingestion, processing, distribution, and visualization
• Develop and maintain analytics code repository (Python and SQL) and data visualization programs (Qlik)
• Deploy analytics workloads using Databricks

Basic Qualifications

• At least 5 years of experience in cybersecurity, information technology, Software Development or related field.
• Know Python, SQL, basic HTML/CSS
• Familiarity with DoD Vulnerability Management (VM) and Risk Management Framework (RMF)
• Knowledge of business intelligence visualization tools
• Excellent communication, collaboration, and problem-solving skills.
• Ability to work independently and as part of a team.
• Data analytics is preferred in Advana or Qlik, however a general familiarity with R or Python analytics (ex; spark, pandas)
• Minimum of a Bachelor of Science (or higher) in one of the following: computer engineering, computer science, IT, cyber security, or a related field.
• Relevant years of experience may be used in substitution for situations where the candidate does not have a Bachelor's degree in the required field.
• Must have 8140 compliant certification (e.g. GCFA, GCIA, CySA+, GICSP, CFR)
• Minimum of an active Secret Clearance.

Pay and benefits

The actual base salary offered will be determined based on a variety of factors, including, but not limited to, the candidate's relevant years and depth of experience, skills and qualifications, education, certifications, internal equity, and the specific requirements of the position. Candidates should not assume they will be offered the top of the posted range, as compensation is based on the individual qualifications and overall fit for the role.