​​SCRM Analyst ​

Description

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

If this sounds like the kind of environment where you can thrive, keep reading!

The Digital Modernization Sector brings together our digital transformation and IT programs, allowing us to better serve our customers through scale and repeatability.

The Department of Homeland Security (DHS), Customs and Border Protection (CBP) Security Operations Center (SOC) is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to CBP networks through monitoring, intrusion detection and protective security services to CBP information systems including local area networks/wide area networks (LAN/WAN), commercial Internet connection, public facing websites, wireless, mobile/cellular, cloud, security devices, servers and workstations. The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems, and collects, investigates, and reports any suspected and confirmed security violations.

• Vulnerability due diligence assessments, Cybersecurity Maturity Model Certification, PMO and source code analysis. To also develop policies and procedures that support customer office and align to risk management framework.

• This team will be responsible for developing the foundational policies and processes to stand up the Cyber Risk Management Team within CBP SOC.

• The position will lead the development of supplier threat and vulnerability assessments related to risk and support change management efforts across the corporation. In addition, individual may support category managers in developing risk assessments across various categories.

• May be required to draft and support all-source intelligence production in compliance with Tradecraft Standards

• Candidate will provide methods to properly communicate the risks applicable to CBP stakeholders and senior management.

• Candidate will create a holistic risk picture for the communications branch and will also provide briefings for senior management on the on the cyber risk posture of CBP.

• Attend and participate in meetings, conferences, and working groups in support of CBP.

• Conduct risk, vulnerability, criticality assessments to prioritize supply chain vendors and their potential impact on CBP's mission.

• Candidate will assist the Government in conducting reviews and recommendations to aid the government in approving of risk acceptance memorandums, assist with the prioritization of POA&Ms, create risk profiles for all CBP information systems, identify common gaps in the information system compliance to focus holistic funding in support of remediating security findings for multiple systems.

• A Bachelor's degree and 8-12 years of applicable experience is required. Additional experience may be considered in lieu of a degree.

• Professional writing, editing, and sourcing skills are mandatory in order to be successful in the position

• Ability to apply extensive knowledge of grammar, punctuation, and corporate writing standards in order to edit reports

• Ability to handle multiple tasks and adjust to changing priorities as needed

• Strong attention to details is required

• Past history developing policies and procedures for compliant procurement in an services environment

• Fundamental understanding of supplier quality management processes

• Strong understanding of Risk Management Framework (RMF)

• Strong understanding of NIST 800-161, NIST 800-30, NIST 800-37 or equivalent DoD policies/standards

• Experience in cyber government, and/or federal law enforcement. Experience in Vulnerability scanning and analysis. Experience in financial, CSP and FISMA audits.