We need an experienced Cybersecurity Analyst at the Defense Contract Management Agency (DCMA). This role supports the cybersecurity evaluation of drone systems and components submitted for review under the Blue UAS Cleared List Program, which determines which commercial unmanned aircraft technologies are secure enough for military and government use. In this role, you will serve as a technical subject matter expert reviewing cybersecurity assessment reports, identify vulnerabilities and residual risks affecting DoW missions, and validate whether submitted remediation plans sufficiently mitigate identified vulnerabilities.

Responsibilities

RESPONSIBILITIES- Serves as a technical subject matter expert supporting the cybersecurity evaluation of product submissions
Provides technical expertise and advisory support regarding cybersecurity requirements, technical standards, risk management, and assessment methodologies
Applies demonstrated knowledge of cybersecurity principles applicable to embedded systems, software, firmware, wireless communications, networking, encryption, authentication, and supply chain security
Interprets cybersecurity assessment methodologies, penetration testing results, vulnerability assessments, software assurance evaluations, and firmware analyses
Reviews cybersecurity assessment reports, supporting technical documentation, and assessment evidence to evaluate completeness, technical sufficiency, and adequacy in support of Government technical acceptance decisions
Identifies cybersecurity vulnerabilities, threats, attack vectors, and residual risks affecting DoW missions, warfighter safety, and national security
Provides technical recommendations regarding cybersecurity findings, risk mitigation strategies, and applicability of cybersecurity requirements to Blue List candidate technologies
Verifies and validates whether a company's submitted remediation plan would sufficiently mitigate identified cyber vulnerabilities
Maintains awareness of applicable Federal statutes, DoW policies, NDAA requirements, and cybersecurity frameworks relevant to the Blue List Program
Monitors emerging cybersecurity threats, vulnerabilities, and policy developments affecting small unmanned systems and related technologies

Requirements

BACKGROUND/REQUIRED EXPERIENCE- Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline
Minimum of five (5) years of practical experience preferred
Active DoW 8570/8140 IAM or IAT Level II or III certification (e.g., CISSP, CISM, or CompTIA Security+) required
Demonstrated expertise applying NIST SP 800-53 controls, NIST SP 800-161 (SCRM), and navigating the DoW Risk Management Framework (RMF) to achieve an Authority to Operate (ATO)
CLEARANCE- Active or interim DoW security clearance; favorably adjudicated Tier 3 background investigation required
Must be a US Citizen

Benefits

Benefits: Benefits package includes options for health, dental, and vision insurance coverage; 401k contribution options. Full benefits brochure available for review.