COMPANY PROFILE:

• Join a team with EXCELLENCE, LOYALTY and INTEGRITY!
• CDI Corporation (NYSE:CDI) has delivered engineering services to blue-chip clients with operations in markets around the world for the past 60 years. We are a $1.1 billion company with a solid balance sheet.
• CDI Marine Company is a division of CDI Government Services and a leader in providing our clients with high quality, cost effective engineering, design and logistics services in the marine industry.
• CDI Marine Company was awarded the Virginia Values Veterans (V3) Governor’s Award in 2016.
• Forbes.com named CDI as one of the Most Trustworthy Companies in the United States in 2012
• CDI Corporation is an EEO/An Affirmative Action M/F/D/V Employer.

GENERAL DESCRIPTION:

• CDI is seeking a Principal Cyber Security Analyst. This is a Full Time position in the Norfolk, VA area.  This position is contingent upon contract award.

GENERAL DUTIES:

• Performing analysis, design, and development of security features for system architectures.
• Designing, developing, engineering, and implementing solutions that meet security requirements.
• Providing integration and implementation of the computer system security solution.
• Operate and maintain security toolsets to support organizations’ continuous monitoring and ongoing authorization programs.
• Conceptualize, design, and build secure technical solutions, including applications, systems, architectures, and infrastructures that are operationally viable and efficient.
• Leverage security products and technologies to protect the organization’s systems and information and enable achievement of the organization’s objectives.
• Research and analyze emerging technologies and design and build architectures and solutions to enable secure implementation of new technologies.
• Serve as a Cybersecurity and Information Assurance (IA) engineer throughout all stages of system acquisition, development, and maintenance.
• Identify and derive cybersecurity requirements
• Identify authorizations required for conducting vulnerability scans, accessing System Under test (SUT)  with administrative privileges, and conducting penetration and exploitation activities across networks and against CS-accredited systems
• Review SUT program documents including Test Evaluation Master Plan (TEMP), manning documents, Developmental Test (DT) Plans and reports, training manuals, and operator and maintenance manuals.
• Review the SUT’s Joint Capabilities Integration and Development System (JCIDS) documentation, such as the initial capabilities, capabilities development, or capabilities production document and the information support plan, CSS, DoD Information Assurance Certification and Accreditation Program (DIACAP) certification and accreditation packages.
• Evaluate SUT and System of Systems (SOS) network architectures and identify SUT’s critical CS capabilities.
• Conduct Cybersecurity operations and engineering services communications programs, including the prevention and analysis of Cyber events and incidents within information systems and networks.
• Support integrated and dynamic Cyber defense and leverage Cybersecurity solutions to deliver vulnerability management services, including leveraging network scanning tools to identify vulnerabilities, employ mitigations, and ultimately remediate system deficiencies.
• Applying know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures.
• Evaluate firewall change requests and assess organizational risk.
• Create and maintain Standard Operating Procedures and other similar documentation.

MINIMUM SKILL REQUIREMENTS:

• BS  degree in computer science or other technical field and degree of applicability
• Ten (10) years of demonstrated experience in planning, implementing, upgrading, or monitoring security measures for the protection of computer networks and information.
• Knowledge of policy development and enforcement, auditing and Certification and Accreditation (C&A) processes, testing and analysis of IA controls and secure configuration using either the Assured Compliance Assessment Solution (ACAS), or Secure Configuration Compliance Validation Initiative (SCCVI). 
• Candidate should possess one of the following commercial certification for this position: Information Systems Audit and Control Association (ISACA) Certified Information Security Manager (CISM), ISC2 Certified Information Systems Security Professional (CISSP) or ISC2 Certified Information Systems Security Professional (CISSP).
• Must possess an outstanding knowledge of standard written English grammar, spelling, punctuation
• Strong communication and interpersonal skills required to interface with clients, employees, and management;
• Must have enthusiasm and a positive, team-oriented attitude
• Ability to organize and multi task is a must
• Proficiency in Microsoft Excel, Word, and PowerPoint and other MS products
• Excellent and effective written & verbal communication skills.

SECURITY REQUIREMENTS:

• Applicant may be subject to a security investigation and then meet the eligibility requirements to obtain and maintain a Top Secret security clearance issued by the US Government. In addition to the security clearance, this position may require an additional background screening for base access.

PHYSICAL REQUIREMENTS/PHYSICAL DEMANDS:

• CARRYING and LIFTING. Ability to transport and lift up to 30 lbs.
• Employee is required to access remote areas of multi-level vessels
• Must comply with Company’s Driver Safety Policy if assigned to operate company and/or rental vehicles