Information Security Analyst

• Perform cybersecurity activities for a large program, coordinating with government program staff and other government agencies to assist in the creation, dissemination, direction and editing or program policy, standards, and operating procedures
• Utilize available resources to conduct system and network vulnerabilities using Security Technical Implementation Guides (STIGS), ACAS vulnerability canner and DISA SCAP to mitigate those finding for Linux, Windows, and associated network operating systems
• Carry out DoD Risk Management Framework (RMF) in accordance with DoD 8510 to ascertain information systems’ security posture by utilizing security control validation activities and coordinating security testing
• Evaluate firewall change requests and assessing organizational risk

• 5+ years of relevant professional experience
• BA/BS degree, or the equivalent combination of education, technical training, or work/military experience
• Must possess and maintain an active Top Secret/SCI (TS/SCI) security clearance
• Must hold an IAM Level II Certification (e.g., CISSP, CASP, CISM, GSLC, or CCIS)
• Additional specific certifications may be required depending on the final job assignment
• Deep understanding of the DoD Risk Management Framework (RMF), specifically NIST SP 800-53 Rev 4 and Rev 5
• Enterprise Mission Assurance Support Service experience (eMASS)
• Strong comprehension of DoD policies and procedures, including FIPS 199, FIPS 200, and NIST 800-53
• DISA STIGS
• Proven familiarity with foundational network concepts, user authentication protocols, and digital signatures
• Demonstrated ability to work effectively within a dynamic, team-oriented, and collaborative environment

Excellent benefits and compensation packages