Job description

Contingent Posting Notice: JMA Resources is recruiting for this position in anticipation of a potential contract award. This position is contingent upon JMA Resources receiving the associated contract award and confirmation of final staffing requirements and funding. Position Overview: The Cybersecurity Analyst supports cybersecurity monitoring, vulnerability management, and risk analysis for our client’s systems and programs. This role analyzes security data, identifies and assesses potential risks, supports process automation, and communicates findings to appropriate stakeholders. Responsibilities: Analyze system logs, security events, and other cybersecurity data to identify potential risks or vulnerabilities. Perform vulnerability analysis using tools such as ACAS and Tenable. Review data from cybersecurity collection and monitoring tools to identify trends, issues, and areas requiring follow-up. Assess the potential impact of identified cybersecurity risks and document findings. Develop scripts and other automation solutions to improve cybersecurity processes and analysis. Prepare clear findings, reports, and recommendations for communication through the appropriate chain of command. Support cybersecurity monitoring and vulnerability management activities in alignment with program requirements. Carry out other related duties assigned to support evolving client, project, and company needs. Clearance Level: Current or ability to obtain a Department of Defense (DoD) Secret Clearance is required. Note: To obtain a security clearance, you must be a U.S. citizen and meet the 13 adjudicative guidelines. Required Qualifications: Experience: At least 6 years of professional cybersecurity experience, including: Analyzing security logs, events, and data from cybersecurity collection tools. Using vulnerability management tools such as ACAS and Tenable. Automating cybersecurity processes through scripting. Assessing the impact of identified risks and presenting findings through the appropriate chain of command. Education/Certification: Bachelor’s degree in computer science, information technology, or an equivalent STEM field; or equivalent professional certification/experience. One of the following certifications: Certified Authorization Professional (CAP) CompTIA Advanced Security Practitioner Continuing Education (CASP+ CE) Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP) or Associate of ISC2 GIAC Security Leadership Certification (GSLC) Certified Chief Information Security Officer (CCISO) Skills: Knowledge of RMF security assessment and authorization activities. Experience evaluating security controls, vulnerabilities, and system configurations. Working knowledge of STIGs, SRGs, and cybersecurity assessment documentation. Ability to document findings and vulnerabilities in eMASS. Scripting and process automation capabilities. Strong analytical, technical writing, and communication skills. Ability to communicate cybersecurity risks and assessment findings to both technical and program stakeholders. Location & Commitments: Position: Full Time Work Arrangement: Hybrid – On-site at our client site in Philadelphia, Pennsylvania. The number of days on-site will be determined by client needs after hire. Travel Requirements: May be required Location Preference: Must reside within a 50-mile radius of Philadelphia, Pennsylvania, due to the on-site/hybrid nature of the position. Work Hours: A typical workday consists of eight hours, totaling a forty-hour workweek. We understand that there may be times when employees will need to adjust their work hours due to client needs or personal reasons. To help balance these demands, we offer some flexibility in work schedules. What We Offer: Competitive salary and discretionary bonuses. Comprehensive health benefits, including medical, dental, and vision insurance. Flexible Paid Time Off (PTO) and holidays to help you maintain a healthy work-life balance. Opportunities for professional development and continued learning. Hybrid/remote work arrangement with flexible hours. 401(k) retirement plan with company match. Employee recognition programs and company events. JMA Resources is an equal opportunity employer committed to achieving a workforce with an environment free of discrimination and harassment. All aspects of employment, including recruitment, hiring, promotions, transfers, discipline, terminations, wage and salary administration, benefits, and training, are based on business needs, job requirements, and individual qualifications, without regard to race, age, color, physical or mental disability, religion, gender, sexual orientation, gender identity/expression, marital status, national origin, political affiliation or protected veteran status. At JMA Resources, we are dedicated to fostering an inclusive environment for all qualified individuals. We provide reasonable accommodations to persons with disabilities to ensure equal access throughout the application and hiring process. If you need assistance or require an accommodation, please reach out to Amy Foy, VP of Employee Experience, at afoy@jmares.com . JMA Resources participates in E-Verify to confirm the identity and employment eligibility of all newly hired employees.

Requirements

Must-haves

Analyze system logs, security events, and other cybersecurity data to identify potential risks or vulnerabilities.
Perform vulnerability analysis using tools such as ACAS and Tenable.
Review data from cybersecurity collection and monitoring tools to identify trends, issues, and areas requiring follow-up.
Assess the potential impact of identified cybersecurity risks and document findings.
Develop scripts and other automation solutions to improve cybersecurity processes and analysis.
Prepare clear findings, reports, and recommendations for communication through the appropriate chain of command.
Support cybersecurity monitoring and vulnerability management activities in alignment with program requirements.
Carry out other related duties assigned to support evolving client, project, and company needs.
Current or ability to obtain a Department of Defense (DoD) Secret Clearance is required. Note: To obtain a security clearance, you must be a U.S. citizen and meet the 13 adjudicative guidelines.
At least 6 years of professional cybersecurity experience, including:
Analyzing security logs, events, and data from cybersecurity collection tools.
Using vulnerability management tools such as ACAS and Tenable.
Automating cybersecurity processes through scripting.
Assessing the impact of identified risks and presenting findings through the appropriate chain of command.
Bachelor’s degree in computer science, information technology, or an equivalent STEM field; or equivalent professional certification/experience.
Certified Authorization Professional (CAP)
CompTIA Advanced Security Practitioner Continuing Education (CASP+ CE)
Certified Information Security Manager (CISM)
Certified Information Systems Security Professional (CISSP) or Associate of ISC2
GIAC Security Leadership Certification (GSLC)
Certified Chief Information Security Officer (CCISO)
Knowledge of RMF security assessment and authorization activities.
Experience evaluating security controls, vulnerabilities, and system configurations.
Working knowledge of STIGs, SRGs, and cybersecurity assessment documentation.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: bamboohr
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off

Professional Development