Cyber Security Analyst II

Alutiiq•San Diego, CA

2d•Onsite

About The Position

Alutiiq Information Management, LLC, a subsidiary of Alutiiq, LLC, is seeking a Cyber Security Analyst II in San Diego, California. The position supports the Digital Additive Manufacturing Environment (DAME) project, led by Naval Information Warfare Command (NIWC) Pacific. DAME integrates networked systems worldwide to provide 3D Print Exchange and Product Lifecycle Management (PLM) capabilities and support a Joint Service 3-D printing capability for the Department of War (DoW). The analyst supports NAVWAR and NIWC Pacific ISSM/CIO personnel with Risk Management Framework (RMF) package development in a technical Information Systems Security Engineer (ISSE) capacity. The role assembles required authorization documentation, assesses and implements security controls and remediation requirements, maintains compliance records, and develops system authorization boundary and data flow diagrams. The analyst works with internal personnel and external representatives at various levels.

Requirements

Bachelor’s degree in Information Technology, Cyber Security, Computer Science, or a related discipline.
Minimum DoD Manual 8570.01M (or equivalent) Cyber Information Technology/Cybersecurity Workforce IAT Level II compliance.
U.S. citizenship.
Currently possess a Secret security clearance with SSBI.
Two to four years of experience in an Information Technology or Cyber Security environment.
Experience supporting the Department of Defense Enterprise Mission Assurance Support Service (eMASS), ACAS, STIGs, and DON VRAM.
Proficiency with Microsoft operating systems, Microsoft SQL, Red Hat Linux, Cisco Aruba wireless, MS Office, and MS Visio.
Ability to communicate effectively verbally and in writing.
Ability to excel in a fast-paced program office environment and attention to detail.
Current Security+ certification.

Nice To Haves

IAM Level III qualification is preferred.
Experience with LENEL and Milestone.
Experience developing Assessment and Authorization (A&A) documentation.
Experience with RMF and NIST SP 800-53 rev 4 as an ISSE.
Knowledge of U.S. naval communication suites, including LAN, WAN, and RF paths.
Working knowledge of servers, software, networking equipment, and other infrastructure elements.
Familiarity with DITPR-DON/DADMS and its requirements.

Responsibilities

Support NAVWAR and NIWC Pacific ISSM/CIO with RMF package development as a technical ISSE.
Assemble documentation required for RMF packages as directed by the ISSM and CNIC/NAVFAC.
Assess and implement security controls, STIGs, and ACAS scans for servers, networking equipment, workstations, and other systems in accordance with governing policies.
Assist system administrators with applicable STIGs, security and design best practices, and IAVA requirements.
Process and maintain compliance records and verify completion of Nessus, STIG, and SCAP files.
Report open findings and vulnerabilities, propose and implement mitigations, and develop POA&Ms when required.
Maintain compliance in VRAM and DITPR-DON/DADMS.
Create system authorization boundary and data flow diagrams traceable to hardware, firmware, software, PPS lists, and ACAS, in compliance with DISA/NAVFAC standards.
Review system PPS lists for compliance with DoDI 8551.01.
Interact with internal personnel and outside representatives at various levels.