DE Jobs

Search from over 2 Million Available Jobs, No Extra Steps, No Extra Forms, Just DirectEmployers

Job Information

Cognosante Defense Assessment Analyst in Camp Humphreys, South Korea

Security Clearance required:

TS/SCI

Do you want to make a difference?

Cognosante employees are passionate about improving people’s lives. With an innovative mindset and an unwavering commitment to those we serve, we partner with healthcare, civilian and defense agencies to deliver exceptional public services and programs. Our multi-faceted technology and customer experience (CX) solutions achieve program outcomes, solve critical challenges and create meaningful change. Whether we are helping Veterans access healthcare faster, ensuring that members of the military complete their missions safely, or helping people obtain health insurance, our work touches millions of people. Are you ready to make a difference?

Come Join Our Team

Fast-paced, dynamic, and rewarding environment supporting regional defense efforts. This project delivers defensive cyberspace operations (DCO) support to Cyber Security Service Provider Division (CSSP-D), US Army Regional Cyber Center-Korea. The CSSP-D environment includes any hardware, software, application, tool, system, or network used by the Government, whether developed, leased, or commercially purchased. Our operations are based on-site at Camp Humphreys, South Korea. Employees are authorized to receive a Living Quarters Allowance, a Cost-of-Living Allowance, and relocation expenses. Additionally, our employees are eligible for reimbursement for school-aged children to attend either Department of Defense Education Activity schools (space available) or local school of choice.

What is the position?

The Defense Assessment Analyst, under limited supervision, will plan, coordinate, integrate, synchronize, direct, and conduct Cyber Defense Operations to detect, deter, disrupt, and deny adversary activities in order to protect and defend the DoD Information Network – Army (DoDIN-A). You will contribute to the development of policies, processes, and architectures to enhance execution of cyberspace operations in support of full spectrum missions. You will direct and oversee the execution of Computer Defense Assistance Program (CDAP) missions, to include Persistent Presence, Penetration Testing, Network Damage Assessments, Network Assistance Visits, and Cyber Security Service Provider (CSSP) assessments of subscriber networks. You will participate in the Risk Management Framework (RMF) accreditation process. You will contribute to re-accreditation efforts for classified and unclassified Army networks in Korea. You will provide technical evaluations and solutions to ensure supported systems are Information Assurance (IA) compliant. Assess risks to information systems and networks from attack or intrusion. This position requires DoD 8140 Certification compliance by having either a Bachelor’s degree in an appropriate major or one of the certifications listed below.

What will I get to do?

You will participate in the execution of required and requested Computer Defense Assistance Program missions in support of Cyber Security Service Provider (CSSP) requirements. You will plan, assess, test, analyze, and report information on security vulnerabilities and possible exploitations present in a variety of complex and secure computer systems. You will prepare, participate in and/or present briefings to senior management officials in conferences and workshops where security related issues are discussed. You will review design documentation, vendor self-assessments, network protocols, and software code for system vulnerabilities. You will review new policies and initiatives by local authorities, Department of Defense (DoD), US Cyber Command, Department of the Army (DA), Army Cyber Command (ARCYBER), NETCOM, and various agencies. You will ensure timely delivery and accuracy of AR 380-53 related products. You will review design documentation, vendor self-assessments, network protocols, and software code for system vulnerabilities. You will provide technical information system security testing in support of the appropriate security risk management processes using security assessment and technical testing efforts, including in-depth network and application vulnerability testing for automated and manual testing and demonstrable false positive validation. You will develop documentation in support of testing efforts, including test plans, preliminary findings reports, security assessment reports, and other test artifacts, as required by the customer. You will work with commercial, and government open-source vulnerability assessment tools and techniques used for evaluating operating systems, databases, and Web applications. You will be required to successfully complete the Army Penetration Testing Course (APTC), location and dates to be determined, once obtaining this position.

What qualifications do I need?

  • Active DoD TS/SCI clearance

  • Bachelor’s degree or higher from an accredited college or university in one of the following fields: Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, Computer Engineering, Mathematics or Engineering

  • Any of the following certifications can be substituted for a Bachelor’s degree: CCSP or CEH or CFR or Cloud+ or CySA+ or GCED or GICSP or PenTest+ If substituting certification for a Bachelor’s degree, a HS diploma or GED is required in addition to the certification

What additional characteristics will help me thrive?

  • 3 or more years of experience in an equivalent position

  • Experience with analyzing and executing test plans and procedures

  • Experience with programming in C, C++, C#, Java, ASM, PHP, Perl, Microsoft .NET, Python, or Ruby and Linux or UNIX shell scripting

  • Experience with problem solving using out-of-the-box approaches

  • Knowledge of penetration attack strategies on Army Enterprise classified and unclassified networks for Web services, databases, and e-mail, forensics tools, and cryptography principles

  • Knowledge of security frameworks, including ISO 27001 and 27002, NIST, HIPPA, or SOX

What We Offer

Our mission is to provide comprehensive and competitive pay, benefits, services, and programs to eligible employees and their dependents that: 

  • Ensure optimal health and productivity of our employees  

  • Support employee retention and attraction 

  • Provide work/life balance to ensure our employees succeed inside and outside of the office 

Compensation

$74,436.56 - $119,096.32

The pay range for this job is determined by various factors, including but not necessarily limited to location, responsibilities of the job, and alignment with market data. When determining a salary for this role, the following factors may be taken into consideration - contract-specific affordability, education, knowledge, skills, competencies and experience. The estimate displayed represents the salary range for this position and is just one component of Cognosante’s total compensation package for employees. It is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee.

Cognosante will not provide sponsorship for employment-based immigration benefits for this position.

What We Promise

Cognosante employees are inspired by our bold mission to improve lives. To achieve this mission, we put our people first. No matter where they're located around the nation, our innovative workplaces enable individuals to apply their skills and experience to work toward a greater good.

We foster a winning culture of solution creators built on innovation, collaboration, flexibility, and work-life balance. And we invest in the next generation of diverse talent to foster an inclusive, progressive, adaptable workplace that prioritizes advancement for all. As an affirmative action employer, we are committed to equal opportunity regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.  

Your safety during your job search is important. Recruiting communications will always be sent through one of the following corporate domain emails (@cognosante.com or @accurate.com).

We will never send communications through any other domain, including @cognosantecareers.com, @gmail.com or @yahoo.com). We will never request payment from you, nor will we send payment to you, prior to your start date. If you have been asked to send or receive any payment, or if you have any doubt about whether you have been contacted by a Cognosante employee, please contact us at jobs@cognosante.com

At Cognosante, we innovate with purpose. Each day, we create meaningful change by delivering mission-driven solutions for healthcare, civilian, and defense government agencies. When you work at Cognosante, you’ll apply your talents and grow your career with an organization that believes in the missions of our customers – and the right every employee has to an inclusive, flexible, and collaborative workplace. Work with us, and you’ll be challenged and supported—and have the platform to elevate your career to wherever your professional aspirations lead.​

Get to know Cognosante employees

  • We’re driven by our customers’ missions, and measure success by how we improve lives.

  • We believe innovative solutions start with an innovative culture.

  • We believe customer understanding is the key to creating innovative solutions.

  • We know we are stronger together, and we value the diversity of our people.

  • We believe growth should be a core job benefit.

Like many other companies, Cognosante has been targeted by scammers making fraudulent job offers to potential candidates. As shared on our company website (https://cognosante.com/careers/) , communications from Cognosante recruiting are only sent with an official corporate domain email (e.g., @cognosante.com) and not a commercial domain e-mail (e.g., @gmail.com or @yahoo.com)). We will never request payment from an applicant, nor will we send payment to an applicant, prior to that individual’s start date.

We want to recommend a couple of ways that you can report this incident and take action against these scams:

-The FBI: File a Complaint (https://www.ic3.gov/Home/FileComplaint)

-The FTC: Report Fraud (https://reportfraud.ftc.gov/#/)

Also, if you're not sure where to report the scam, you can find some guidance here: Where to report scams | USAGov (https://www.usa.gov/where-report-scams) .

DirectEmployers