Cyber Security Analyst I VM

Cyber Security Analyst I VM (Journeyman) - ECCOS

EOE Statement

Technology Automation & Management (TeAM), Inc.

TeAM is looking for highly motivated and highly skilled individuals who are ready for exciting opportunities with a growing company. For more than a quarter of a century, we've built our reputation as a premier solutions provider to the Federal Government, and eagerly seek creative problem solvers to join our TeAM.

We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law.

Description

Pending Contract Award

Mission Objectives - ECCOS provides Enterprise Vulnerability Management (EVM) support to Mission Delta 6. The Cyber Security Analyst I VM (Journeyman) positions support the EVM cell by transforming vulnerability-scan results, remediation information, assessment findings, and configuration data into accurate, actionable analysis for senior EVM personnel, system owners, and Government leadership.

Working under the direction of the Senior EVM Analysts, these positions analyze vulnerability scan output, assess compliance incidents, track remediation commitments and Plans of Action and Milestones (POA&Ms), prepare vulnerability-management risk reporting, validate data supporting CMRS and Scorecard submissions, and maintain component-level configuration information. The three analysts are cross-trained to sustain continuity across EVM activities during personnel absences, inspections, exercises, surge events, crises, and contingencies.

Position Responsibility Summary (by CLIN focus):

CLIN 0007 - Scan Analysis and Compliance Assessment

• Analyze vulnerability scan output to identify anomalies, recurring weaknesses, data-quality issues, unusual trends, incomplete scan coverage, aging vulnerabilities, and conditions requiring senior EVM analyst or Government stakeholder attention.
• Validate and organize scan findings using Government-provided vulnerability-management tools, repositories, trackers, and data sources; ensure records are accurate, complete, traceable, and suitable for further analysis.
• Assess cybersecurity compliance incidents by collecting relevant technical information, reviewing applicable requirements and evidence, documenting observations, identifying affected systems or stakeholders, and supporting the development of corrective actions.
• Support the Senior EVM Analysts in validating vulnerability findings, determining probable impact, identifying remediation dependencies, and tracking corrective action through closure.
• Prepare technical summaries, scan-analysis products, status reports, findings packages, and supporting documentation for system owners, cybersecurity personnel, and Government leadership.
• Coordinate with system administrators, system owners, engineers, and cybersecurity stakeholders to clarify vulnerability findings, validate remediation status, resolve data discrepancies, and obtain required evidence.
• Maintain documentation, trackers, evidence repositories, and data records in accordance with Government procedures, classification requirements, and established EVM quality-control practices.
• Serve as the trained alternate for CLIN 0008, supporting POA&M monitoring, remediation tracking, and EVM risk-trend reporting when required.
• Alternate: CLIN 0008

CLIN 0008 - POA&M Tracking and Risk Reporting

• Monitors and tracks Plans of Action and Milestones (POA&Ms) (PWS 3.3)
• Produces risk trend reporting (PWS 3.3) Analyze vulnerability scan output to identify anomalies, recurring weaknesses, data-quality issues, unusual trends, incomplete scan coverage, aging vulnerabilities, and conditions requiring senior EVM analyst or Government stakeholder attention.
• Validate and organize scan findings using Government-provided vulnerability-management tools, repositories, trackers, and data sources; ensure records are accurate, complete traceable, and suitable for further analysis.
• Assess cybersecurity compliance incidents by collecting relevant technical information, reviewing applicable requirements and evidence, documenting observations, identifying affected systems or stakeholders, and supporting the development of corrective actions.
• Support the Senior EVM Analysts in validating vulnerability findings, determining probable impa