Cyber Security Analyst/ISSO

Arete Associates•Los Angeles, CA

4d•$80,000 - $110,000•Onsite

About The Position

Areté is seeking an immediate full-time Cyber Security Analyst / Information Systems Security Officer (ISSO) to support our Northridge, CA facility. This role requires a minimum, active TOP SECRET clearance, and the selected candidate must be able to obtain and maintain a CI polygraph. In this position, you will work closely with Cyber Security and IT team members, provide occasional after-hours support, and travel as needed. You will support a range of classified information systems with varying levels of complexity. NOTE: This is a 100% On-site position; hybrid or remote work options are not available.

Requirements

Active Top Secret security clearance with ability to obtain a CI polygraph.
1-2 years of experience performing ISSO or equivalent cybersecurity duties for classified systems.
Demonstrated experience with JSIG, RMF, and NIST 800-53 security controls.
Hands-on experience in security auditing, continuous monitoring, and documentation of control implementation.
Current IAT Level II Security Certification or higher (Security+, CASP, CySA+, CISSP, GSEC) or ability to obtain within 3 months of the start date.
Must have solid technical knowledge on how Windows and Server operating systems are hardened.
Experience with common information system Cyber Security tools, technologies, and STIGs (Nessus/ACAS, SCAP Compliance Checker, STIG Viewer, Microsoft Group Policy, etc.).
Strong interpersonal skills, technical writing skills, and the ability to work autonomously and on a team.
Strong written communication skills and the ability to document/diagram information systems and procedures.
Must be able to lift 25 pounds.
U.S. citizenship is required to meet position eligibility.
Successful passage of a criminal background screen is required to meet position eligibility.
Selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.
Successful passage of a Department of Transportation (DOT) drug test is required to meet position eligibility.

Nice To Haves

Knowledge of the Risk Management Framework is a plus;
Experience with Security Directives, Policies, Publications and Regulations including but not limited to the NIST 800-171, NIST 800-53, JSIG and/or ICD 503;
Experience in one or more of the following Cybersecurity tools/technologies: SIEM or Log Reduction & Analysis Tools, McAfee ePO, SCC Tool, Bitlocker, Rapid7 IDR, InsightVM;
Technical knowledge on how Linux (RHEL 8/9) systems are configured, hardened, and managed.

Responsibilities

Perform duties as ISSO in accordance with JSIG, RMF, and NIST 800-53.
Develop, maintain, and update security authorization documentation including System Security Plans (SSPs), Plan of Actions and Milestones (POA&M), SCTMs, ConMon Reports, and audit logs.
Conduct security control implementation, validation, and assessment activities.
Perform and document system audits and risk analysis.
Manage and execute Continuous Monitoring (ConMon) tasks to ensure compliance throughout the system lifecycle.
Support configuration management (CM) processes with a minimum of 1-2 years direct CM experience, including review and documentation of system changes, baseline management, and change control.
Provide incident response support, including investigation, reporting, and remediation of security events.
Support preparation for internal and external inspections and assessments.
Support ISSM with other duties as assigned.