Information Security Analyst Senior

Senior Information Security Analyst responsible for RMF-based cybersecurity activities, risk assessments, audits, and vulnerability management for a large program, coordinating with government and military stakeholders.

Responsibilities

• Lead and execute cybersecurity activities tied to RMF for a large program, coordinating with government program staff, USAF, and other agencies to create, disseminate, direct, and audit policy, standards, and operating procedures.
• Leverage available resources to perform comprehensive cybersecurity tasks.
• Conduct network and system vulnerability audits using STIGs, ACAS, and DISA SCAP to address findings across Linux, Windows, and related OSes.
• Create, track, and review Plans of Action and Milestones (POA&Ms) and identify solutions to support remediation.
• Communicate tactical and strategic threat information to government leaders, Cybersecurity-Ops, and A&A staff to inform cyber risk decisions and mitigate threats.
• Implement DoD RMF per DoW 8510 to determine security posture via security control validation activities and coordinated testing.
• Maintain Security Authorization status and document multiple DoW classified networks and interconnected systems.
• Coordinate with OUSDI, USAF, DISA, USN, and other organizations for audits and inspections; provide required documentation for SAVs, ST&Es, and CCRI.
• Evaluate firewall change requests and assess organizational risk.
• Perform Security Impact Analysis aligned with organizational requirements.
• Issue alerts to agencies regarding intrusions or compromises to networks, applications, and operating systems.
• Assist in implementing countermeasures or mitigating controls.
• Enforce the integrity and protection of networks, systems, and applications by technically enforcing security policies and monitoring vulnerability scanning devices.
• Conduct periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, and file system and integrity scans to ensure compliance.
• Provide guidance and leadership to less-experienced technical staff.
• Maintain current knowledge of relevant technology as assigned.
• Participate in special projects as required.

Requirements

• 5+ years of experience; BA/BS or equivalent combination of education, training, or work/military experience.
• IAM Level II Certification (CISSP, CASP, CISM, GSLC, or CCIS).
• Must possess and maintain a SECRET clearance with eligibility to obtain Top Secret/SCI security clearance.
• Additional certifications may be required depending on the assignment.
• Ability to work in a collaborative, team-oriented environment.
• Familiarity with network concepts, user authentication, and digital signatures.
• Understanding of DoW RMF (800-53 Rev 4 and Rev 5).
• Understanding of DoW policies and procedures, including FIPS 199, FIPS 200, NIST 800-53, and related policies.

Technologies

• DISA STIG
• eMASS
• NIST 800-53
• RMF
• ACAS vulnerability scanner
• DISA SCAP

Benefits

• Relocation assistance

Compensation

• Hourly rate: USD 68 - 72

Location

• Ford Island, HI (onsite)