COMPUTER SYS SECURITY ANLYST 2

Huntington Ingalls•Newport News, VA

2d•$82,000 - $102,000•Onsite

About The Position

Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products. Conducts risk assessment and provides recommendations for application design. Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access. Uses encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research. May prepare security reports to regulatory agencies. The candidate will assist system owning engineers with the selection, application and implementation of security controls on various networks & systems. Prior direct experience with network technologies (Layer 3 switches, firewalls, etc.) and tools (such as Wireshark, Net Management solutions, Splunk) is desired. Prior experience with system administration, operating system hardening or ICS/SCADA experience is a plus.

Requirements

Bachelor's Degree and 2 years of relevant exempt experience; Master’s Degree and 0 year of relevant professional experience
NNS Apprentice School graduate
Navy Nuclear Power School (NNPS) graduate
Associate's Degree or other formal 2 year program and 2 years of relevant exempt experience or 4 years of relevant non-exempt experience
Military Paygrade E-5 or above military experience
High School/GED and 4 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant exempt experience
High School/GED and 8 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant non-exempt experience
A relevant professional certification can be substituted for a Bachelor's Degree.

Nice To Haves

Mid to senior level familiarity and experience executing DoD Security Technical Implementation Guides (STIGs) testing and analyses
Mid-level experience with either Industrial Control System (ICS) and/or Supervisory Control and Data Acquisition (SCADA) environments or IT System administration or IT Network administration
Knowledge of DoD Risk Management Framework (RMF) phases and tasking.
Experience dealing with RMF tasking writing Plan of Action and Milestones POA&Ms, addressing security controls for compliance
Submitting security controls documentation, etc. as a part of Authority To Operate (ATO) process
Facilitating discussions with cross-sectional teams to compile the compliance documentation
Navy Enterprise Mission Assurance Support Service (eMASS) experience is ideal but not required
DoD 8570 recognized certifications, e.g. Security+, Network+, CCNA, is desired
Prior direct experience with network technologies (Layer 3 switches, firewalls, etc.) and tools (such as Wireshark, Net Management solutions, Splunk)
Prior experience with system administration, operating system hardening or ICS/SCADA experience

Responsibilities

Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products.
Conducts risk assessment and provides recommendations for application design.
Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.
Uses encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research.
May prepare security reports to regulatory agencies.
Assist system owning engineers with the selection, application and implementation of security controls on various networks & systems.