COMPUTER SYS SECURITY ANLYST 3

Huntington Ingalls•Newport News, VA

2d•Onsite

About The Position

Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products. Conducts risk assessment and provides recommendations for application design. Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access. Uses encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research. May prepare security reports to regulatory agencies. The candidate will assist system owning engineers with the selection, application and implementation of security controls on various network systems. This will include interpreting cyber security requirements for inclusion in purchase documents and specifications as well as assisting in validating those requirements. The candidate will also assist in the creation and execution of SSPs for systems falling under NIST 800-171 requirements. The ability to quickly learn new technologies and to turn general principles into concrete implementations will be helpful.

Requirements

Bachelor's Degree and 5 years of relevant exempt experience
Master’s Degree and 3 years of relevant professional experience
Ph.D. and 0 years of experience
NNS Apprentice School graduate
Navy Nuclear Power School (NNPS) graduate
Associate's Degree or other formal 2 year program and 2 years of relevant exempt experience or 4 years of relevant non-exempt experience
Military Paygrade E-5 or above military experience
High School/GED and 4 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant exempt experience
High School/GED and 8 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant non-exempt experience
A relevant professional certification can be substituted for a Bachelor's Degree.
US Citizenship Required
Interim Clearance Required To Start

Nice To Haves

Previous A&A experience with RMF and DFARS, including SSP and POA&M development
Hands-on experience implementing security features on various network and computing technologies
Experience with Industrial Control Systems (ICS), including assessment
Experience with security assessment and monitoring tools (i.e. ACAS/Nessus, HBSS, Splunk, etc)
Experience with Navy shipboard systems
eMASS experience
Design and operations of routed networks
Virtualization technologies (e.g. Vmware, VirtualBox) including building and securing Virtual Machines (VMs)
Naval shipboard systems experience
Naval Nuclear experience
Vulnerability assessment tools (Nessus, SCAP, DISA STIGS)
Securing and hardening operating systems
At least one DoD 8570 recognized certification (at least Network+ or Security+)
CISSP, CISM, GSLC, or CASP certification
Developing DIACAP/RMF accreditation system packages, including conducting risk assessments and mitigation strategies
Identification, analysis and documentation of DoD 8500.01 DIACAP/DoD 8510.01 RMF Information Assurance (IA) Controls’ test results

Responsibilities

Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products.
Conducts risk assessment and provides recommendations for application design.
Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.
Uses encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research.
May prepare security reports to regulatory agencies.
Assist system owning engineers with the selection, application and implementation of security controls on various network systems.
Interpret cyber security requirements for inclusion in purchase documents and specifications.
Assist in validating those requirements.
Assist in the creation and execution of SSPs for systems falling under NIST 800-171 requirements.