Computer Sys Security Anlyst 3

Ingalls Shipbuilding•Newport News, VA

4d•Onsite

About The Position

Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products. Conducts risk assessment and provides recommendations for application design. Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access. Uses encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research. May prepare security reports to regulatory agencies. The candidate will assist system owning engineers with the selection, application and implementation of security controls on various network systems. This will include interpreting cyber security requirements for inclusion in purchase documents and specifications as well as assisting in validating those requirements. The candidate will also assist in the creation and execution of SSPs for systems falling under NIST 800-171 requirements. The ability to quickly learn new technologies and to turn general principles into concrete implementations will be helpful.

Requirements

Bachelor's Degree and 5 years of relevant exempt experience; Master’s Degree and 3 years of relevant professional experience; Ph.D. and 0 years of experience.
NNS Apprentice School graduate
Navy Nuclear Power School (NNPS) graduate
Associate's Degree or other formal 2 year program and 2 years of relevant exempt experience or 4 years of relevant non-exempt experience
Military Paygrade E-5 or above military experience
High School/GED and 4 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant exempt experience
High School/GED and 8 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant non-exempt experience
A relevant professional certification can be substituted for a Bachelor's Degree.

Nice To Haves

Previous A&A experience with RMF and DFARS, including SSP and POA&M development
Hands-on experience implementing security features on various network and computing technologies
Experience with Industrial Control Systems (ICS), including assessment
Experience with security assessment and monitoring tools (i.e. ACAS/Nessus, HBSS, Splunk, etc)
Experience with Navy shipboard systems
DoD 8570 recognized certification (i.e. Security+, Network+, CCNA, etc) preferred
Experience with eMASS, design and operations of routed networks, virtualization technologies (e.g. Vmware, VirtualBox) including building and securing Virtual Machines (VMs).
Experience working with naval shipboard systems is an added plus, and Naval Nuclear experience is added value.
Vulnerability assessment tools (Nessus, SCAP, DISA STIGS); securing and hardening operating systems
At least one DoD 8570 recognized certification (at least Network+ or Security+; also desire CISSP, CISM, GSLC, or CASP is an added plus)
Developing DIACAP/RMF accreditation system packages, including conducting risk assessments and mitigation strategies
Experienced in the identification, analysis and documentation of DoD 8500.01 DIACAP/DoD 8510.01 RMF Information Assurance (IA) Controls’ test results.

Responsibilities

Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products.
Conducts risk assessment and provides recommendations for application design.
Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.
Uses encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research.
May prepare security reports to regulatory agencies.
Assist system owning engineers with the selection, application and implementation of security controls on various network systems.
Interpreting cyber security requirements for inclusion in purchase documents and specifications as well as assisting in validating those requirements.
Assist in the creation and execution of SSPs for systems falling under NIST 800-171 requirements.