Cybersecurity Analyst

The Opportunity

The successful candidate will lead and execute advanced cybersecurity initiatives, providing a critical role in safeguarding our organization's information systems and data. Leveraging your extensive experience, you will be responsible for the design, implementation, and management of sophisticated security solutions. Your role will involve proactive threat hunting, incident response coordination, and strategic planning to enhance the overall cybersecurity posture. Collaboration with cross-functional teams, staying ahead of emerging threats, and contributing to the continuous improvement of security processes will be key aspects of this role.

As an Experienced Cybersecurity Analyst with a focus on CMMC (Cybersecurity Maturity Model Certification) and NIST 800-171, you will play a pivotal role in ensuring compliance with these standards and fortifying our organization's overall cybersecurity posture. Your responsibilities will include implementing, managing, and enhancing security controls to meet CMMC and NIST 800-171 requirements. This role demands expertise in assessing and mitigating risks associated with sensitive government data, collaborating with key stakeholders, and maintaining a proactive approach to emerging threats.

Our Technology

We’re the world leader in Resilient Positioning, Navigation and Timing (R-PNT) solutions that improve the reliability, performance, and safety of critical high-risk operations, even in GPS/GNSS denied environments. We provide virtually fail-safe GNSS and PNT solutions and applications for military and government contract customers.

How I Will Contribute

I CMMC and NIST 800-171 Compliance:
- Lead efforts to assess, implement, and maintain compliance with CMMC and NIST 800-171 standards.
- Conduct comprehensive reviews of security controls to ensure alignment with regulatory requirements.
- Work closely with cross-functional teams to address deficiencies and implement corrective actions.
Security Control Implementation:
- Design, implement, and manage security controls to meet the specific requirements outlined in CMMC and NIST 800-171.
- Ensure the effective deployment of technical and procedural safeguards for sensitive information.
Documentation and Reporting:
- Develop and maintain documentation related to CMMC and NIST 800-171 compliance, including system security plans and control assessments.
- Generate regular reports to communicate the status of compliance efforts to management and relevant stakeholders.
Continuous Monitoring and Improvement:
- Establish a continuous monitoring program to track and evaluate the effectiveness of security controls.
- Identify areas for improvement and implement measures to enhance the organization's cybersecurity maturity.
Security Audits and Assessments:
- Coordinate and participate in internal and external audits related to CMMC and NIST 800-171.
- Conduct regular assessments to ensure ongoing compliance and readiness for certification.
Incident Response and Risk Management:
- Contribute to incident response planning and execution, ensuring alignment with CMMC and NIST 800-171 requirements.
- Participate in risk assessments, identifying and mitigating risks associated with controlled unclassified information (CUI).
- Provide leadership during security incidents, coordinating with internal and external stakeholders.
- Conduct post-incident analysis and implement lessons learned to enhance future response capabilities.
Training and Awareness:
- Provide training sessions to internal teams on CMMC and NIST 800-171 requirements and best practices.
- Foster a culture of security awareness and compliance throughout the organization.
Advanced Threat Detection and Response:
- Lead advanced threat hunting activities to identify and respond to sophisticated cyber threats.
- Analyze and investigate complex security incidents, determining attribution and impact.
- Coordinate incident response efforts, ensuring timely and effective resolution.
Security Architecture and Design:
- Design, implement, and manage security architectures for networks, systems, and applications.
- Evaluate and recommend security technologies, ensuring alignment with organizational goals.
- Provide expertise in the development of secure coding practices and architecture reviews.
Vulnerability Management and Penetration Testing:
- Conduct in-depth vulnerability assessments and penetration tests on a variety of systems and applications.
- Develop and execute strategies for identifying and remediating critical vulnerabilities.
- Mentor and guide junior team members in performing advanced testing techniques.
Security Research and Innovation:
- Stay abreast of the latest cybersecurity threats, vulnerabilities, and technologies.
- Evaluate emerging technologies and make recommendations for adoption.

Contribute to the organization's security thought leadership through research publications and industry engagement.

What You Bring To The Role

Candidates must document US citizenship.

Bachelor's degree in Cybersecurity, Information Technology, or a related field.
3-5+ years of progressive experience in cybersecurity roles.
Industry-recognized certifications such as CISSP, CISM, or equivalent.
In-depth knowledge of CMMC and NIST 800-171 standards and their application.
In-depth knowledge of cybersecurity principles, technologies, and methodologies.
Expertise in security incident response, threat intelligence, and advanced threat detection.
Strong understanding of security architecture and design principles.
Experience with cloud security and mobile security.
Excellent communication and leadership skills
This position requires independent judgment and discretion, as well as the identification, analysis and resolution of security-related matters. The successful candidate will provide support for all security functions in accordance with the CMMC and NIST 800-
Experience maintaining records required for audits and review
Ability to communicate effectively with all levels of internal staff and external client
Strong interpersonal, problem solving and organizational skills with the ability to work in a team-based environment
Proficiency with Microsoft Office 365, Azure, AWS, FedRamp technologies, Windows 11 and Linux
Experience with Cisco Meraki, Cisco ISE, BeyondTrust EndPoint Privilege Management , VMware is a plus
In-depth knowledge SIEM tools, IDS/IPS systems, Endpoint protections, network security devices and encryption technology
Ability to work independently and contend with frequently changing priorities and deadlines
Travel: 10-20% domestic and international
Additional Duties as required

Ability to manage multiple complex projects simultaneously.

Some Of “the Good Stuff”

Annual Bonus Opportunity
Medical, Dental, Vision, Health Savings Account, Flexible Spending Account
Paid Time Off
401k Retirement Program with Employer Match
Gym Membership Reimbursement
Tuition Reimbursement Program
Employee Career Development
Flexible working arrangements
Excellent culture

About Safran Federal Systems

Safran Federal Systems has been awarded as a Winner of the Rochester Metro Area Top Workplaces 2024 Award.

In 2022, Safran acquired Orolia, now Safran Trusted 4D, the world leader in Resilient PNT. At the intersection of critical infrastructure and national defense, Safran Trusted 4D solutions govern and protect the integrity of systems that shape the world. In early 2019, Orolia Defense & Security spun off as a separate entity from its parent company Orolia, with the mission of providing resilient Positioning, Navigation and Timing (PNT) solutions and custom engineering services to U.S. Government agencies, U.S. Defense organizations, and their contractors.

In August of 2019, Safran Federal Systems acquired Talen-X, a U.S. company specializing in advanced GNSS (Global Navigation Satellite System) Simulation solutions and Interference, Detection, and Mitigation (IDM) technologies. Talen-X's portfolio was an ideal fit and has helped to enhance Safran FS's overall offerings. The acquisition enabled Talen-X's existing resources, operations and capabilities to be scaled and accelerated to better support the warfighter. Read the press release here.

Safran Federal Systems operates as a proxy-regulated company, Free of Foreign Ownership, Control, or Influence (FOCI). As such, Safran FS Defense & Security is approved to work on the full spectrum of U.S. Government classified and unclassified projects and is positioned to support strategic partnerships in the development of key PNT technologies for the defense market.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Please note this description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Safran - Navigation & Timing

New Jobs

Cybersecurity Analyst