Cyber OT&E Analyst

Requisition #: 691

Job Title: Cyber Security Engineer

Location: 6910 Cooper Avenue Fort Meade, Maryland 20755

Clearance Level: Active DoD - Secret

Required Certification(s): Advanced cybersecurity certifications (e.g., CISSP, Sec+, OSCP, CEH)

We are seeking a Cybersecurity Operational Test & Evaluation (OT&E) Analyst to support the Joint Interoperability Test Command (JITC) as the lead Operational Test Agency (OTA) to perform Operational Effectiveness, Suitability, and Cyber Survivability (OESCS) of the Secret and Below Releasable Environment (SABRE). SABRE is designed to facilitate improved information sharing between the U.S. and Mission Partners (MPs) during Globally Integrated Operations (GIO), and it will be integrated as an enterprise solution to the DoD Mission Partner Environment (MPE) requirement. Utilizing the principal tenets of data-centric security (DCS) and architectural tenets of DoD Zero Trust.

As a Cybersecurity OT&E Analyst, you will work with a team responsible for all aspects of cybersecurity support to the SABRE MPE. The Cyber OT&E support involves providing support for cybersecurity and cyber survivability assessments in accordance with the Operational Evaluation Cell (OEC) and Cyber Survivability Assessment Team (CSAT) criteria. In addition, you will be responsible for assisting with the planning, executing, and reporting efforts for the following events: Cyber Tabletop (CTT), Cooperative Vulnerability Penetration Assessment (CVPA) and Adversarial Assessment (AA). Finally, you will provide technical support on SABRE-related test events, including Integrated Test Teams (ITT), Cyber Working Groups (CWGs), and Developmental/Operational Test and Evaluation (DT&E/OT&E) in the Continental United States (CONUS).

* In support of integrated DoD IT/NSS Cybersecurity T&E efforts, will conduct SABRE cybersecurity requirements decomposition, assist with the test planning, execution, analysis and reporting efforts for all test events. Activities Include:

* Support for Coopertive Vulnerability Assessments (CVA)

* Prepare Request for Information to support Cyber Master Evaluation Framework (CMEF).

* Identify and note any risk items that will be tracked using the Cyber Risk Tracking Matrix (CRTM)

* Prepare Rules of engagement (ROE) and Test Concept Brief for the (AA)

* Use appropriate system documentation to perform requirements analysis and make sure sufficient information is known about any new capabilities or System Under Test (SUT). Successful planning of integrated Operational Test (OT) events will include the following; must be able to: help update and develop a Data Source Matrix (DSM) for each integrated T&E event, develop a formal SUT Cybersecurity Risk Assessment (RA), prepare and provide a SUT Test Concept Brief (TCB), conduct Cyber Tabletop (CTT) create and deliver a SUT Cybersecurity Test Plan, create Test Readiness Review (TRR) slides, and compile SUT Developmental Evaluation Framework (DEF).

* Perform Cybersecurity T&E execution efforts by assisting in data collection and observe users performing the mission and/or execute operational scenarios; collect, document, and manage all test data In Accordance With (IAW) the JITC OT&E guidance for a Data Management and Analysis Plan (DMAP); leverage instrumentation and automation of data collection and management; hold daily hot washes with the user community to talk about the day's activities; socialize issues and/or problems encountered; present overall percentages of test objectives completed to date; describe the activities planned for the next day; provide daily Emerging Results Reports (ERRs); and attend actively participate in Data Authentication Group (DAG) events and activities at the end of each SUT test event.

* Perform Test Reporting by conducting data reduction, analysis, and management in IAW the SUT Test Plan. Provide a Quick Look Report (QLR) that includes initial and emerging test results and lessons learned. Create and deliver a formal SUT Test Report that includes analyzed data and conclusions, including input from all applicable test events, e.g., Developmental, Operational, Interoperability (IOP) and Cybersecurity.

* Conduct SUT Cybersecurity documentation reviews by providing in depth technical RMF reviews/comments as they pertain to SUT programmatic documentation, such as Test and Evaluation Master Plan (TEMP)/Test and Evaluation Strategy (TES), and Requirement Documentation (i.e. Information Support Plan (ISP), DoD Architecture Framework (DoDAF) Technical and Architectural Views, and identify the critical SUT requirements and NR KPP that require needed Cybersecurity T&E to ensure DoD customer and stakeholder success.

* Support an integrated IOP T&E approach in conjunction w/ OT events by completing Cybersecurity test planning efforts, executing the test event, collecting, analyzing all data, test reporting, and all other efforts required for a robust, efficient, cost-effective T&E program.

* Provides input to staff involved in writing and updating technical documentation. Provides guidance and work leadership to less-experienced Cybersecurity and other T&E software, hardware and integrated system engineers and analysts, may serve as a technical team or task leader. Provide cybersecurity and information assurance consultation on complex projects and be a top-level contributor/specialist; must be expert at problem-solving, identifying risk, and communicating results and recommendations.

Required Certifications

* Advanced cybersecurity certifications (e.g., CISSP, Sec+, OSCP, CEH).

Education, Background, and Years of Experience

* Requires a Technical Master's Degree in a science, technology or mathematics and 6 years of related DoD system or capability Cybersecurity experience (E.g. Tactical Data Link, DoD C2, C4/5ISR, Logistics, Medical Systems, Finance or Homeland Security Systems).

Required Skills

* Ability to assist in the development/production of DT&E, OT&E and IOP products and documents (E.g. Test Concept Briefs (TCB), Data Source Matrix (DSM), Cybersecurity Test Plans, Quick Look Reports (QLR) and Final Report Memorandum) that clearly articulates the Cybersecurity results and findings.

* 6 years experience in cyber testing is required. Cyber testing experience consisting of conducting Cybersecurity Risk Assessment (CRA), Cyber Vulnerability Identification (CVI), Cooperative Vulnerability and Penetration Assessment (CVPA), and Adversarial Assessment (AA).

* The candidate must be a U.S. Citizen and have an active DoD Top Secret (TS) security clearance. The TS Security Clearance must have been completed within the past five (5) years.

Preferred Skills

* * Development Test and Evaluation (DT&E)

* * Operational Test and Evaluation (OT&E)

* * Interoperability Test and Evaluation (IOP T&E)

* * Integrated Test and Evaluation (Integrated T&E

* * Standard Conformance and Compliance Test and Evaluation (SCCT&E)

* * NATO/Coalition Parter Verification and Validation T&E

* Excellent organizational, coordination, interpersonal and team building skills.

* Joint Analysis Net-Centric Evaluation Testing Toolkit (JANETT)

* JITC Data Management Tool (JDMT)

* DevSecOps

* Wireshark

* IXIA T&E Tools

* Altova T&E Tools

* Spirent Tools

* ServiceNow

* LoadRunner

* NMAP

* Power BI

* DoD Cross Domain Solutions

* DoD Endpoint Security

* Zero Trust Security Architecture

* Secure Cloud Computing Architecture

* DoD Acquisition Processes and Regulations

* DoD Architecture Framework (DoDAF)

* Net Ready Key Performance Parameters (NR KPP)

* DOT&E Guidebook and Instructions on conducting OT&E activities.

* DoD/Military Service OTA Specific Guidebook and Instructions on conducting OT&E activities.

Environmental Conditions

* Government site with 0%-10% travel possible. Possible off-hours work to support releases and outages. General office environment. Work is generally sedentary in nature, but may require standing and walking for up to 10% of the time. The working environment is generally favorable. Lighting and temperature are adequate, and there are not hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.

Strength Demands

* Sedentary - 10 lbs. Maximum lifting, occasional lift/carry of small articles. Some occasional walking or standing may be required. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

Physical Requirements

* Stand or Sit; Use Hands / Fingers to Handle or Feel

Happy - Be Infectious.

Helpful - Be Supportive.

Honest - Be Trustworthy.

Humble - Be Grounded.

Hungry - Be Eager.

Hustle - Be Driven.

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35 (c)