Cyber Operations Analyst

KIHOMAC•Vandenberg Space Force Base, CA

12h•$120,000 - $130,000

About The Position

Develop and provide RMF Assessment and Authorization (A&A) documentation in accordance DoD, NIST, and other governing documents Maintain the current, approved Authorization to Operate (ATO) for assigned system Gather and/or develop any needed A&A artifacts Update artifacts as required ensuring that they are current and document findings in the approved Risk Management Framework (RMF) or similar A&A documentation format provided Assist with monitoring and the implementation of security controls Perform work within incident management, response, and response coordination Gather artifacts/data to support cybersecurity metrics and reporting Utilize cybersecurity tools (ACAS, STIG, Trellix ePO, Elasticsearch) to perform verification of operation in accordance with requirements Perform accurate and verified risk assessments that cover all of the security controls and policies for key stakeholders Track, monitor, and manage the information system’s Plan of Action and Milestones (POA&M) and provide technical assistance as required Analyze, verify and update PPSMs as required for programs Provide artifacts that support the maintenance of security packages Evaluate NIST 800-53 controls for applicability, generate implementation statements, and get implementations approved Prepare documents in support of Control Validation Tests (CVTs) to confirm compliance of ATOs submitted for RMF packages Perform security audits and vulnerability assessments and develop documentation and reports Develop policies, plans and procedures, including Incident Response, Disaster Recovery/Continuity of Operations and Cybersecurity Implementation Plans Other duties as assigned

Requirements

Education/Training: Bachelor’s Degree in management or other relevant discipline preferred
Active DoD 8570 IAT Level II certification (ex: Security+) required
Experience: 4+ years of general full-time work experience
2+ years of professional experience in the required task area
Experience requirement may be reduced with completion of advanced degree in a relevant field
Demonstrable understanding of Microsoft Office Suite required
Experience with Configuration Management processes and workflows required
Security: Must be a US citizen
Current active clearance at level Secret or higher required
Physical Requirements: Able to occasionally reach with hands and arms
Prolonged periods of computer screen use, while sitting or standing at a desk
Adhere to safety protocols when in work areas requiring use of PPE (e.g. eyewear, gloves, masks, hearing protection, steel toed shoes, etc.)
Able to safely lift and carry up to 20 pounds at a time

Nice To Haves

Previous experience conducting system and log auditing preferred
Experience with endpoint security enforcement and validation preferred
Vulnerability management experience preferred
Experience with eMASS preferred
Familiarity with Security Controls Traceability Matrix (SCTM) preferred

Responsibilities

Develop and provide RMF Assessment and Authorization (A&A) documentation in accordance DoD, NIST, and other governing documents
Maintain the current, approved Authorization to Operate (ATO) for assigned system
Gather and/or develop any needed A&A artifacts
Update artifacts as required ensuring that they are current and document findings in the approved Risk Management Framework (RMF) or similar A&A documentation format provided
Assist with monitoring and the implementation of security controls
Perform work within incident management, response, and response coordination
Gather artifacts/data to support cybersecurity metrics and reporting
Utilize cybersecurity tools (ACAS, STIG, Trellix ePO, Elasticsearch) to perform verification of operation in accordance with requirements
Perform accurate and verified risk assessments that cover all of the security controls and policies for key stakeholders
Track, monitor, and manage the information system’s Plan of Action and Milestones (POA&M) and provide technical assistance as required
Analyze, verify and update PPSMs as required for programs
Provide artifacts that support the maintenance of security packages
Evaluate NIST 800-53 controls for applicability, generate implementation statements, and get implementations approved
Prepare documents in support of Control Validation Tests (CVTs) to confirm compliance of ATOs submitted for RMF packages
Perform security audits and vulnerability assessments and develop documentation and reports
Develop policies, plans and procedures, including Incident Response, Disaster Recovery/Continuity of Operations and Cybersecurity Implementation Plans
Other duties as assigned