Information Security Analyst - Journeyman (Mon – Fri)

Description

At The One 23 Group, our mission is to set the benchmark for excellence in government services. We empower our clients in the Department of Defense (DoD), Intelligence Community, and Federal Civilian sectors to excel through advanced technical capabilities and dedicated mission support. Our foundation rests on a people-first culture, integrity, and proactive problem-solving.

The Defense Commissary Agency (DeCA) operates under the operational direction of Joint Force Headquarters–Department of Defense Information Network (JFHQ-DoDIN) and United States Cyber Command (USCYBERCOM) to defend and sustain the Department of Defense Information Network as a Tier-1 DoDIN Area of Operations (DAO). DeCA upholds rigorous compliance standards, including the Federal Information Security Modernization Act (FISMA), Payment Card Industry Data Security Standard (PCI-DSS), and the NIST Risk Management Framework (RMF).

• The Information Security Analyst (Journeyman) is part of a dedicated technical remediation team supporting the Desktop Common Operating Environment (DCOE). In this role, you will receive scan findings and government-directed POA&M work orders, analyze technical requirements, and coordinate directly with desktop and systems administrators to implement fixes, remediate non-compliant STIG configurations, resolve IAVMs, and deliver verification artifacts back to government stakeholders.

Requirements

Primary Responsibilities:

• Vulnerability Ingestion & Triage: Review and analyze vulnerability scan reports (ACAS/Tenable) and compliance exports provided by government scanning personnel; prioritize actions based on severity (CAT I/II/III, CVSS, and IAVM timelines).
• POA&M Work Order Execution: Receive, review, and execute technical work orders and corrective taskings tied to government-established Plans of Action and Milestones (POA&Ms); implement the necessary technical fixes to resolve underlying weaknesses.
• Hands-on Technical Remediation: Collaborate with Desktop Common Operating Environment (DCOE) administrators and systems engineers to remediate vulnerabilities through patch deployment, registry adjustments, Group Policy (GPO) configuration, and operating system baselines.
• STIG Remediation & Hardening: Review DISA Security Technical Implementation Guide (STIG) and SCAP compliance findings; implement technical controls on Windows endpoints and document remediation actions or technical hurdles.
• Remediation Artifact Collection: Gather, format, and provide technical artifacts, test results, and objective evidence to government personnel (ISSM/ISSO) to support government validation and closure of POA&M items.

Secondary Responsibilities:

• Pre-Scan Validation & Coordination: Conduct local verification to confirm that patches, GPO modifications, and hardening scripts applied properly prior to requesting government re-scans.
• IAVM Tracking & Work Order Alignment: Track Information Assurance Vulnerability Management (IAVM) notices against assigned remediation work orders, ensuring timely implementation within required operational windows.
• Ticket Management & Work Order Tracking: Maintain accurate, up-to-date documentation on remediation activities and status updates inside enterprise ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti).
• Endpoint Protection Support: Coordinate with endpoint administrators to ensure McAfee/Trellix Endpoint Security Solutions (ESS/HBSS) agents are healthy and updated on target endpoints throughout remediation cycles.

Required Knowledge & Skills:

• Ability to read, interpret, and prioritize vulnerability scan reports generated by ACAS (Tenable Nessus) and SCAP/SCC tools.
• Experience executing remediation work orders and tracking remediation tasks tied to government POA&Ms.
• Practical technical experience remediating cybersecurity findings in a Windows enterprise computing environment (e.g., GPO modifications, registry updates, script execution, and patch verification).
• Strong working knowledge of DISA STIGs, SRGs, and associated checklist formats (.ckl).
• Familiarity with DoD cybersecurity concepts, the DoD IAVM program, vulnerability categorization (CAT I, II, III), and CVSS scoring.
• Experience compiling objective remediation evidence and artifacts (e.g., command outputs, screenshots, configuration logs) for government validation.
• Working knowledge of enterprise ITSM/ticketing systems (e.g., ServiceNow, BMC Remedy, Ivanti) to track work orders and milestones.
• Basic understanding of Public Key Infrastructure (PKI) and endpoint protection tools (ESS/HBSS).
• Strong written and verbal communication skills for effective coordination with system administrators, engineering teams, and government leads.

Qualifications:

• Education & Experience: Bachelor’s degree plus Five (5) years of relevant experience.
• DoD 8140 Foundational Certification (Required): Active certification (CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+).
• Computing Environment Training (Required or obtainable post-hire):
  
  • Training in ACAS/EMASS.
  • ITIL v4 Foundation certification (preferred / obtainable post-hire).

Clearance Requirement: Active DoD Secret clearance (or ability to obtain and maintain an interim Secret clearance prior to start).