Senior Continuous Monitoring Analyst

Job Description
Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise.

In support of this mission, we have an immediate opportunity for a Senior Continuous Monitoring Analyst. In this role you will mature DHS continuous monitoring (ConMon) program toward an advanced Intelligence Community Zero Trust maturity level. You will integrate security tool data into automated dashboards and cyber heat maps, produce IC vulnerability and performance reporting, and brief leadership on enterprise risk posture. This position is on-site in a Government SCIF in Washington, DC.

• Provide continuous monitoring of DHS IE networks, systems, and users using Government-approved tools.
• Integrate automated data feeds (GRC, Nessus, Axonius, GitLab, Splunk, SCCM) into cyber heat maps and dashboards.
• Develop and maintain RIVET dashboards and analytics integrated with the GRC tool.
• Produce and maintain the automated feed for monthly IC Vulnerability Alerts (ICVA) and IC Vulnerability Management (ICVM) reports.
• Produce the CISO Scorecard and quarterly Cybersecurity Performance Evaluation Model (CPEM) submissions.
• Conduct weekly POA&M monitoring and track system owner remediation.
• Identify anomalies in the operational environment and report them to designated personnel.
• Recommend ConMon improvements and update ConMon SOPs.

Requirements

• BS degree in Information Technology, Cybersecurity, Information Systems, Data Science, or Computer Science OR minimum of 10 years' experience in IT or cybersecurity.
• Minimum of 7 years' experience in vulnerability management or continuous monitoring.
• Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
• Knowledge of continuous monitoring program requirements under NIST SP 800-137 and RMF.
• Knowledge of vulnerability management metrics and reporting.
• Knowledge of Federal or IC security performance reporting (e.g., ICVM/ICVA, CPEM, FISMA ConMon).
• Skill in using Tenable.sc/ACAS or Nessus.
• Skill in building dashboards in Splunk or Tableau.
• Ability to integrate data from multiple security tools into a single view of risk.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.

Desired

• Knowledge of IC Zero Trust maturity levels.
• Experience with RSA Archer, Axonius, Tanium, or CyberArk.
• Proficiency with Python, PowerShell, or Splunk SPL.
• CISSP, CySA+, GCIA, or Tenable certification.

Summary
Tharros combines extensive cyber defense knowledge with the world's preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward.

In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation's security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations.

Tharros. See Everything. Secure Anything.

Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status.