OverviewAt V2X, we are making a difference by delivering decision support tools critical for the protection of our forces when threatened by both physical and Chemical, Biological, Radiological, or Nuclear (CBRN) threats.As an Intermediate Cybersecurity Analyst contracted to support a DOD software development project, you will play a vital role in ensuring the security and compliance of software systems critical to national defense. Operating remotely, you will collaborate with senior cybersecurity analysts and development teams to conduct security assessments, analyze vulnerabilities, and implement cybersecurity controls. Your responsibilities will include documenting security findings, incident response activities, and compliance efforts for upload to EMASS (Enterprise Mission Assurance Support Service) in accordance with DOD standards and regulatory requirements.ResponsibilitiesMajor Job Activities: - Participating in security assessments of software systems and applications throughout the development lifecycle, identifying vulnerabilities, and recommending mitigation strategies.
- Collaborating with senior cybersecurity analysts and development teams to integrate security controls and best practices into the design, development, testing, and deployment phases.
- Assisting in performing threat modeling exercises to identify potential risks and vulnerabilities in software architectures and functionalities.
- Supporting code reviews and conducting static and dynamic analysis to identify security flaws, coding errors, and vulnerabilities.
- Assisting in incident response efforts related to cybersecurity incidents and breaches during test events, conducting forensic investigations, and analyzing root causes.
- Participating in security reviews, audits, and compliance assessments, documenting assessment results and recommendations for remediation.
- Monitoring security alerts and threat intelligence feeds, assisting in analyzing threat intelligence data, and proactively mitigating risks to software systems.
- Assisting in documenting security documentation for upload to EMASS, ensuring accuracy, completeness, and compliance with DOD reporting requirements.
- Collaborating with DOD stakeholders, program managers, and security teams, documenting security requirements, concerns, and resolutions to support the successful delivery of software solutions.
Material & Equipment Directly Used: - Windows based computer systems
- Computer, Phone, and basic office materials
- Lab environment, such as representative computers and sensors
Work Environment: - This work is completed in an office environment but might include outdoor fielding and various customer locations. This work can be completed locally from a home office, but may require partial attendance within our Software Integration Lab located in Ashland, VA.
- Must be able to travel to customer sites and in support of cybersecurity testing events.
QualificationsQualifications: - Education:
- Bachelor’s Degree in Computer Science (BSCS), Information Security, or related field.
- Experience:
- Industry experience in cybersecurity analysis, incident response, and documentation, with a minimum of 3 years in a mid-level role.
- Demonstrated experience or knowledge in cybersecurity analysis, incident response, and documentation.
- Familiarity with software development methodologies, coding practices, and secure coding principles.
- Basic understanding of DOD cybersecurity policies, standards, and directives, with a willingness to learn and adapt to new requirements.
- Strong analytical and problem-solving skills, with the ability to learn quickly and apply new concepts effectively.
- Good communication and interpersonal skills, with the ability to work collaboratively in a remote team environment.
- Relevant industry certifications, such as Security+, CySA+, or similar, are a plus.
- Experience working on DOD contracts or within the defense industry is preferred but not required.
- Commitment to maintaining professionalism, integrity, and confidentiality in handling sensitive information.
- Skills & Technology:
- Individual must be a self-motivated performer and work well both as an individual as well as in small groups to accomplish unique mission objectives.
- Individual must be able to manage and prioritize multiple projects at one time.
- Must be able to communicate with the customer clearly and support customer prioritization.
- Certification:
- Relevant industry certifications, such as Security+, CySA+, or similar, are a plus.
- Other Requirement:
- Secret Clearance or higher
- Software:
- Windows based computer systems
- Technology:
- Computer, Phone, and basic office materials
- Lab environment, such as representative computers and sensors
- What We Bring:
- At V2X we strive to be market competitive in our total reward offerings.
- The successful candidate’s starting pay will be based on, but not limited to, their job-related skills, experience, qualifications, work location, and market conditions.
- Employee benefits include the following:
- Healthcare Coverage
- Life insurance, AD&D, and Disability Benefits
- 401K Retirement plan
- Wellness Programs
- Paid Time Off, Including Holidays
- Learning and Development resources
- Employee Assistance Program (EAP)
- Pay and benefits are subject to change at any time and may be modified at the discretion of the company, consistent with the terms of any applicable compensation or benefit plans.
We are committed to an inclusive and diverse workplace that values and supports the contributions of each individual. This commitment along with our common Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation and expand our success in the global marketplace. Vectrus is an Equal Opportunity /Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, protected veteran status or status as an individual with a disability. EOE/Minority/Female/Disabled/Veteran.
