Cybersecurity Analyst II

Tharros is seeking a Cybersecurity Analyst to support a Department of Defense customer in securing information systems across on-premises, cloud, and hybrid environments. This role will support the planning, implementation, testing, and assessment of security controls, including vulnerability assessments using ACAS, validation against DISA STIGs and SRGs, and implementation of secure system, network, and cloud configurations.

The ideal candidate brings experience in cybersecurity testing and evaluation, vulnerability management, system hardening, and DoD security compliance, with exposure to Infrastructure as Code (IaC) and security automation. This individual will also provide technical vulnerability and configuration data to support Mission-Based Cyber Risk Assessments (MBCRAs) and broader risk-based cybersecurity decisions.

Key Responsibilities

• Description of Duties: The Cybersecurity Analyst is responsible for the planning, implementation, and assessment of security controls to ensure the confidentiality, integrity, and availability of information systems across on-premises, cloud, and hybrid environments. Under general supervision, the Analyst shall:
• Performs cybersecurity testing and evaluation, including vulnerability assessments using DoD-approved tools (e.g., ACAS), and validates system configurations against DISA STIGs and SRGs
• Implements and automates security configurations for operating systems, network devices, and cloud resources in accordance with Infrastructure as Code (IaC) best practices
• Supports Mission-Based Cyber Risk Assessments (MBCRAs) by providing technical data on vulnerabilities and system configurations
• Develops and maintains RMF authorization package artifacts in the Enterprise Mission Assurance Support Service (eMASS)

• Active TS/SCI clearance
• Bachelor's degree and 3 years of relevant experience
  
  
  • Or High School Diploma and 7 years of relevant experience
  
  
• IAM Level II (CGRC, CASP+, CISM, or equivalent)