Cybersecurity Analyst

AUSGAR Technologies Inc is seeking a Cybersecurity Analyst to support Navy Warfare Development Center (NWDC) missions in Norfolk, VA in an onsite setting. This role serves as an Accreditation Analyst and Experiment Support Planner, acting as a cybersecurity subject-matter expert for down-selected initiatives with a focus on Assessment and Authorization (A&A), Risk Management Framework (RMF) planning, compliance activities, and security testing.

In this position, you will track and assist A&A efforts for technology providers, help engineering teams reach required accreditation milestones ahead of experiment participation, and support required documentation and testing artifacts used to prepare systems for naval environments.

Key Responsibilities

• Track, monitor, and assist Assessment and Authorization (A&A) efforts for technology providers selected for operational experiments.
• Support engineering teams in developing plans to achieve required accreditations in advance of experiment participation.
• Analyze general information assurance-related technical problems and provide technical support to resolve them.
• Develop and review Interim Authority to Test (IATT) plans for down-selected initiatives.
• Develop and review a feasible Risk Management Framework (RMF) process with A&A points of contact (POCs) to align planning, installation, and execution milestones.
• Create and maintain a timeline and tracker for RMF A&A package development.
• Coordinate with the NAVWAR Navy Authorizing Official (NAO) and Security Control Assessor (SCA) Package Support Office to define IATT in-hand dates and accreditation termination dates for down-selected initiatives.
• Conduct ACAS scanning and SCAP Testing, and perform manual STIG testing as required to support A&A package development.
• Enter and update POA&M items, track action items for package development in eMASS, and identify outstanding action items for cyber POCs.

Required Qualifications

• Active Secret Clearance, with ability to obtain a TS/SCI.
• Must have IAT/IAM Level II certification, specifically Security+ CE.
• Bachelor’s Degree in a technical field (example areas include Engineering, Physical Sciences, Math, or Management Information Systems) and 5+ years of Information Assurance operations experience.
• 2+ years of direct experience with RMF and related installation and accreditation processes.
• Certainly align with cybersecurity analyst or ISSE-type experience.
• Experience with eMASS, Navy RMF, ACAS/NESSUS, and SCAP.
• Experience with compliance of current Navy IT and IA policies, including ship and ashore policy requirements.
• Experience working with material solutions intended to connect to a Navy network, such as applications, networks, servers, or associated devices.
• Knowledge of DoD Cybersecurity policies and procedures.
• Knowledge of IA certifications and accreditations associated with the A&A process.
• Knowledge of required A&A documentation prior to experiment events, including documentation for equipment installed on a naval vessel or aircraft.
• Ability to identify cybersecurity architecture issues to meet Navy requirements, including review of RMF IATT artifacts.
• Prior experimentation or test and evaluation experience is desired.
• Minimal travel may be required, up to 5%.

Technology Areas

• Security+ CE
• eMASS
• ACAS
• NESSUS
• SCAP
• STIG
• Risk Management Framework (RMF)
• Interim Authority to Test (IATT)
• Assessment and Authorization (A&A)
• POA&M
• Enterprise Mission Assurance Support Service (eMASS)

Salary

$95,000 - $115,000 per year.

Additional Notes

• A Federal Government-issued security clearance is essential and may require successful completion of a background check.
• Based on qualifications, the role may be placed in Level I-V.
• E-Verify is used to electronically confirm employment eligibility of newly hired employees.
• Salary range depends on factors including experience, skills, education, certifications, and geographical location, and includes base salary and an excellent benefits package.