SMX is seeking a DCO Analyst (Reporting) to support GISA at Ft. Belvoir, VA. The successful candidate will have familiarity with relevant regulations and compliance standards, particularly those pertaining to vulnerability scanning in the Army and IC environment. They will also have Site Lead Experience.

Essential Duties & Responsibilities

• Work with Program Manager and Customer Leads to coordinate and oversee the daily operations of the site, ensuring that all activities align with the teams goals and standards.
• Prepare detailed automated reports on identified vulnerabilities, including their severity, potential impact, and recommended remediation steps.
• Analyze the results of vulnerability assessments and prioritize vulnerabilities based on their criticality, potential impact, and ease of exploitation.
• Work closely with IT teams to track and manage the application of security patches and updates to mitigate identified vulnerabilities.
• Stay up-to-date with the latest threat intelligence to understand emerging vulnerabilities and their potential impact on the AIE.
• Ensure that the AIE complies with as DOD, Army and IC task orders, bulletins regulations and standards related to vulnerability management.
• Collaborate with incident response teams to address vulnerabilities that have been exploited or could be exploited during a security incident.
• Contribute to security awareness programs to educate employees about the importance of vulnerability reporting and the availability of reporting through automated methods.
• Maintain records of vulnerability assessments, reports, and remediation efforts for audit and compliance purposes.

Required Skills, Experience & Education

• Active TS security clearance and eligible for SCI and NATO read-on prior to starting work
• Meet the DoD requirements for a privileged user on a TS/SCI information system prior to starting work 
• A bachelor’s degree in a relevant field such as cybersecurity, information technology, or computer science.
• DoD 8570 level III Industry certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH).
• Proficiency in vulnerability scanning and cyber tools such as Nessus, Splunk, network analyzers, Big Data Platform / analytics, as well as knowledge of related tools and technologies.
• In-depth knowledge of cybersecurity principles, best practices, and emerging threats.
• Strong analytical and problem-solving skills are necessary to assess and prioritize vulnerabilities effectively.
• Acute attention to detail is vital to ensure accurate assessments of vulnerability reporting.
• The ability to communicate technical findings and recommendations to non-technical stakeholders is essential.
• Collaboration with IT teams, security teams, and cross functional regional support groups is crucial to ensure the timely remediation of vulnerabilities.
• Familiarity with DOD, Army and IC regulations and compliance requirements related to vulnerability management.
• Current with the latest threats, vulnerabilities, and mitigation techniques in a DOD, Army and IC environment.

Desired Skills, Experience & Education

• 5 years’ experience on Army Intel programs.
• 2 years’ experience with AC2SP tenant assessment and accreditation activities.

#LI-TM1 #CJPOST