Defensive Cyber Assessment Analyst - Senior

Job Description Position Summary

ECS is seeking a Defensive Cyber Assessment Analyst - Senior to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. This position supports Task 3 - Cybersecurity Operations Support - by assisting with security control assessments and validation activities across ARNG classified and unclassified network environments. The analyst conducts configuration reviews, analyzes vulnerability scan results, collects assessment evidence, documents findings, and supports POA&M updates, remediation tracking, and follow-up validation testing under senior oversight. In this role, the candidate contributes to ENOCS delivery of Defensive Cyberspace Operations - Internal Defensive Measures (DCO-IDM) and works as part of the broader cybersecurity operations team that provides continuous cyber defense, compliance, vulnerability management, and RMF support.

This role supports a mission environment delivering DoDIN services to more than 120,000 users and approximately 141,000 endpoints across about 2,800 sites in 54 states and territories. ENOCS supports ARNG Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and classified SIPRNet operations across the DoDIN-Army-NG area of responsibility. The Defensive Cyber Assessment Analyst - Senior operates within a technical environment that includes eMASS, vulnerability and compliance workflows aligned to RMF, Security Technical Implementation Guides (STIGs), Information Assurance Vulnerability Alerts (IAVAs), and enterprise cybersecurity operations coordinated with the NETCOM Global Cyber Center and DISA DCDC.

Please Note: This position is contingent upon contract award.
Responsibilities

• Conduct configuration reviews and assist with security control assessment activities for ARNG systems and services under senior oversight.
• Analyze vulnerability scan results and document assessment findings to support remediation and cybersecurity compliance actions.
• Collect, organize, and maintain assessment evidence required for RMF activities, security reviews, and supporting documentation.
• Support development and maintenance of POA&Ms by tracking deficiencies, remediation status, and validation of corrective actions.
• Perform follow-up validation testing to confirm that identified findings have been resolved in accordance with RMF requirements and DoD and ARNG cybersecurity policy.
• Assist with updates to eMASS records and associated artifacts to support continuous assessment and ongoing maintenance of authorization.
• Review system configurations against applicable STIGs, IAVAs, and cybersecurity guidance to identify control gaps and compliance issues.
• Support Task 3 deliverables by documenting assessment results that inform vulnerability management, secure baseline configuration, and continuous compliance validation activities across ARNG classified and unclassified enclaves.
• Coordinate assessment support activities with the broader ENOCS cybersecurity operations team operating in conjunction with the NETCOM Global Cyber Center and DISA DCDC to strengthen DCO-IDM outcomes across the DoDIN-Army-NG AOR.

Required Skills Required Qualifications

U.S. Citizenship is required

Security Clearance: TS//SCI Eligible

Required Certifications: DCWF Work Role 541-Vulnerability Assessment Analyst - Basic proficiency; must hold ONE OR MORE of the following: CEH

Experience: 3+ years of experience in cybersecurity

• Experience supporting security control assessments, validation activities, or comparable cybersecurity compliance reviews.
• Experience reviewing system or device configurations and documenting findings in a clear, auditable manner.
• Experience analyzing vulnerability scan results and assisting with remediation tracking and follow-up verification.
• Experience supporting POA&M management processes, including documenting deficiencies and monitoring closure status.
• Familiarity with RMF processes and the collection of evidence needed to support authorization and continuous assessment activities.
• Working knowledge of DoD and ARNG cybersecurity policy implementation in classified and unclassified environments.
• Ability to produce accurate written assessment documentation, supporting artifacts, and status updates for senior cybersecurity personnel.

Desired Skills Desired Qualifications

Security Clearance: Active TS//SCI (preferred)

• Experience supporting cybersecurity operations for Army, ARNG, or other DoD enterprise environments.
• Familiarity with eMASS updates and maintenance of authorization artifacts within an RMF-based compliance process.
• Experience assessing compliance against STIGs, IAVAs, and related secure baseline configuration requirements.
• Exposure to enterprise environments using tools and platforms referenced in ENOCS operations, such as ACAS, STIG Manager, or USIEM-supported workflows.
• Experience supporting assessment or compliance activities in environments coordinated with organizations such as NETCOM, ARCYBER, USCYBERCOM, or DISA.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

is the federal segment of , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven