CSSP Protect Analyst

Act as the technical cybersecurity liaison for subscriber organizations, resolving complex security posture issues, patching delays, and system misconfigurations. Track and analyze CISA's Known Exploited Vulnerabilities (KEV) catalog using standardized frameworks to prioritize mitigation efforts and coordinate rapid remediation. Execute comprehensive vulnerability assessments using the Assured Compliance Assessment Solution (ACAS) to deliver actionable, prioritized remediation steps. Monitor cyber threat intelligence feeds, indicators of compromise, and open-source reports to anticipate emerging vectors and adjust defensive postures. Support CSSP Evaluator Scoring Metric (ESM) compliance assessments by gathering technical evidence and conducting internal control reviews for JFHQ-DoDIN mandated evaluations. Coordinate Blue Team assessments to validate subscriber security postures against DoW and agency-specific standards, while performing technical validation of endpoint security tools and boundary defense mechanisms. Implement and validate compliance with USCYBERCOM TASKORDs, Cyber Protection Condition (CPCON) shifts, and operational directives. Lead compliance-focused working groups with subscriber IT teams to ensure readiness for rigorous audits. Requires Top Secret Clearance with SCI eligibility and DoD 8570/8140 certifications. Located at Fort Belvoir, VA; day shift Monday through Friday with occasional evening or weekend availability.