NCIS Cyber Security Analyst | Active TS/SCI clearance

General Dynamics Information Technology•Quantico, VA

1d•$106,275 - $143,783•Onsite

About The Position

GDIT is seeking a Cyber Security Analyst to support the Naval Criminal Investigative Service (NCIS) ITD organization in Quantico, Virginia. This position is pending funding and is onsite. The role supports authorization package tasks and the Risk Management Framework (RMF) authorization process, including preparing required artifacts in accordance with Navy Testing Guidance and the RMF Process Guide. The analyst reviews Security Technical Implementation Guides (STIGs), uses scanning tools to assess and report security configuration compliance, tests and documents RMF security controls, and applies NIST SP 800-53 Revision 5 controls. The position conducts baseline and recurring ACAS scans, prepares vulnerability and summary reports, supports continuous monitoring, and performs risk analyses of systems and applications throughout the system development life cycle. The analyst also initiates and maintains eMASS registrations and RMF Assessment and Authorization packages, helping ensure systems meet Department of the Navy RMF authorization requirements.

Requirements

Active TS/SCI clearance is required; a Top Secret clearance with SCI eligibility is also acceptable.
U.S. citizenship is required.
At least 5 years of experience in the systems security discipline, with specific emphasis on Navy cybersecurity practices.
Experience developing RMF A&A Security Plans, System Level Continuous Monitoring (SLCM), Ports, Protocols and Services Management (PPSM), Host Based Security Systems (HBSS), ACAS vulnerability scanning, and STIGs.
Experience with eMASS tools.
Experience preparing, processing, assessing, validating, and maintaining RMF A&A packages using eMASS and XACTA.
Experience using public key-based technologies for applications.
CompTIA Security+ CE certification.
Bachelor of Science degree, or 4 additional years of experience in lieu of the degree.

Nice To Haves

Completed Navy RMF training.
Formal ACAS training.
Formal eMASS training.

Responsibilities

Support authorization package ACAS-related tasks and prepare required artifacts in accordance with Navy Testing Guidance and the RMF Process Guide.
Review STIGs and use scanning tools to assess and report security configuration compliance with DoW requirements.
Execute and document RMF security-control testing and provide evidence of control implementation for A&A packages.
Select, tailor, and document security and privacy controls using NIST SP 800-53 Revision 5.
Perform 90-day baseline scans for authorization packages and provide Detailed Vulnerability List (DVL) and ACAS Summary Reports.
Conduct weekly and as-needed ACAS scans supporting RMF Step 3 and Step 4, vulnerability assessments, and continuous monitoring.
Report vulnerability status for active Enterprise Security packages and create asset lists from provided hardware lists.
Perform computer-system and application risk analyses throughout the system development life cycle using ACAS.
Initiate eMASS registrations and prepare, process, update, monitor, assess, validate, and maintain RMF A&A packages using eMASS and XACTA.
Implement and validate A&A packages to ensure security controls and vulnerabilities meet Department of the Navy RMF authorization requirements.

Benefits

Medical plan options, including plans with Health Savings Accounts.
Dental plan options.
Vision plan.
401(k) plan with company match.
Paid time off, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.
Wellness packages.
Full flex work weeks where possible.
Career growth and learning opportunities, internal mobility support, and competitive pay.