Pending Contract Award Mission Objectives - ECCOS provides Enterprise Vulnerability Management (EVM) support to Mission Delta 6. The Cyber Security Analyst I VM (Journeyman) positions support the EVM cell by transforming vulnerability-scan results, remediation information, assessment findings, and configuration data into accurate, actionable analysis for senior EVM personnel, system owners, and Government leadership. Working under the direction of the Senior EVM Analysts, these positions analyze vulnerability scan output, assess compliance incidents, track remediation commitments and Plans of Action and Milestones (POA&Ms), prepare vulnerability-management risk reporting, validate data supporting CMRS and Scorecard submissions, and maintain component-level configuration information. The three analysts are cross-trained to sustain continuity across EVM activities during personnel absences, inspections, exercises, surge events, crises, and contingencies. Position Responsibility Summary (by CLIN focus): CLIN 0007 - Scan Analysis and Compliance Assessment - Analyze vulnerability scan output to identify anomalies, recurring weaknesses, data-quality issues, unusual trends, incomplete scan coverage, aging vulnerabilities, and conditions requiring senior EVM analyst or Government stakeholder attention.
- Validate and organize scan findings using Government-provided vulnerability-management tools, repositories, trackers, and data sources; ensure records are accurate, complete, traceable, and suitable for further analysis.
- Assess cybersecurity compliance incidents by collecting relevant technical information, reviewing applicable requirements and evidence, documenting observations, identifying affected systems or stakeholders, and supporting the development of corrective actions.
- Support the Senior EVM Analysts in validating vulnerability findings, determining probable impact, identifying remediation dependencies, and tracking corrective action through closure.
- Prepare technical summaries, scan-analysis products, status reports, findings packages, and supporting documentation for system owners, cybersecurity personnel, and Government leadership.
- Coordinate with system administrators, system owners, engineers, and cybersecurity stakeholders to clarify vulnerability findings, validate remediation status, resolve data discrepancies, and obtain required evidence.
- Maintain documentation, trackers, evidence repositories, and data records in accordance with Government procedures, classification requirements, and established EVM quality-control practices.
- Serve as the trained alternate for CLIN 0008, supporting POA&M monitoring, remediation tracking, and EVM risk-trend reporting when required.
- Alternate: CLIN 0008
CLIN 0008 - POA&M Tracking and Risk Reporting - Monitors and tracks Plans of Action and Milestones (POA&Ms) (PWS 3.3)
- Produces risk trend reporting (PWS 3.3) Analyze vulnerability scan output to identify anomalies, recurring weaknesses, data-quality issues, unusual trends, incomplete scan coverage, aging vulnerabilities, and conditions requiring senior EVM analyst or Government stakeholder attention.
- Validate and organize scan findings using Government-provided vulnerability-management tools, repositories, trackers, and data sources; ensure records are accurate, complete, traceable, and suitable for further analysis.
- Assess cybersecurity compliance incidents by collecting relevant technical information, reviewing applicable requirements and evidence, documenting observations, identifying affected systems or stakeholders, and supporting the development of corrective actions.
- Support the Senior EVM Analysts in validating vulnerability findings, determining probable impact, identifying remediation dependencies, and tracking corrective action through closure.
- Prepare technical summaries, scan-analysis products, status reports, findings packages, and supporting documentation for system owners, cybersecurity personnel, and Government leadership.
- Coordinate with system administrators, system owners, engineers, and cybersecurity stakeholders to clarify vulnerability findings, validate remediation status, resolve data discrepancies, and obtain required evidence.
- Maintain documentation, trackers, evidence repositories, and data records in accordance with Government procedures, classification requirements, and established EVM quality-control practices.
- Serve as the trained alternate for CLIN 0008, supporting POA&M monitoring, remediation tracking, and EVM risk-trend reporting when required.
- Alternate: CLIN 0009
CLIN 0009 - CMRS and Scorecard Data, Configuration Data - Prepare, validate, reconcile, and organize data supporting Congressionally Mandated Report Submissions (CMRS), Department of War Scorecards, and other Government-directed vulnerability-management reporting requirements.
- Collect data from Government-provided vulnerability-management repositories, scan outputs, trackers, configuration records, and stakeholder inputs; perform quality checks to identify incomplete, inaccurate, duplicate, untimely, or inconsistent information.
- Manage component-level configuration data used to support vulnerability assessment, asset accountability, reporting accuracy, scan coverage, remediation tracking, and enterprise cybersecurity readiness.
- Perform vulnerability scan reviews to confirm data completeness, identify significant findings and anomalies, validate scan status, and support escalation of data-quality or cybersecurity-risk concerns.
- Support development of reports, data calls, metrics, dashboards, and briefing materials by ensuring vulnerability, asset, configuration, and compliance data are accurate, traceable, current, and aligned with authoritative Government sources.
- Coordinate with system owners, administrators, cybersecurity personnel, EVM analysts, and Government stakeholders to obtain missing data, clarify configuration details, reconcile discrepancies, and support timely report submission.
- Maintain complete documentation and records supporting CMRS, Scorecards, configuration management, scan reviews, reporting assumptions, data sources, and quality-control actions.
- Serve as the trained alternate for CLIN 0007, supporting scan-output analysis, anomaly/trend identification, and compliance-incident assessment when required.
- Alternate: CLIN 0007
|