Cyber Security Analyst (41112)

**Job Duties/Scope Of Work**The Sr. Cybersecurity analyst role is critical for evaluating emerging cybersecurity risks, assisting in developing cybersecurity policies and procedures, assessing systems, providing solutions for meeting cybersecurity requirements, and advising the Director of Cybersecurity, Information System Security Manager (ISSM), DOE, and other Information Management (IM) leaders on cybersecurity related matters. This role encompasses industrial control systems (ICS) and operational technology (OT), as well as the General Support System (GSS).Key Responsibilities And Duties IncludeDevelop and maintain comprehensive cybersecurity policies and procedures in accordance with the Federal Information Security Management Act (FISMA) to safeguard information systems and dataParticipate in development and maintenance of System Security Plans (SSP) in accordance with National Institute of Standards and Technology (NIST)Ensure compliance with relevant laws, regulations, and standardsConduct risk assessments and vulnerability analyses to identify potential security threats and weaknesses to system environments, including ICS/OT, and determine appropriate mitigationsOperate, coordinate, and execute day-to-day cybersecurity functions, including certification and accreditation planning and activities, continuous monitoring (CM) activities, cybersecurity assessments, data calls, investigations, and liaison activities, working closely with IT and other organizations to integrate cybersecurity into the organization's operationsDirectly participate in change and configuration management oversight activities relevant to accreditation boundariesEvaluate products and participate in projects to address and implement cybersecurity supply chain risk management (SCRM) principles and requirementsApply cybersecurity requirements and principles in evaluating design and implementation of new and existing systems and support secure operation and maintenance of systems within accreditation boundariesRespond to cybersecurity incidents and intrusions, including investigation, mitigation, and ensuring that reporting requirements are metParticipate in incident response and disaster recovery exercises and eventsEstablish and implement corrective action plans, plan of action and milestones (POAMs), as needed to address cybersecurity issuesEvaluate systems and processes in operation to verify security requirements are implemented effectivelyMonitor cybersecurity reports from external sourcesImplement government and industry best practices for protection of system environments to achieve and maintain an acceptable level of risk**Basic Qualifications**[]{style="font-family: Verdana, Gene"}