Cybersecurity Analyst - 26-039

AUSGAR Technologies•Norfolk Naval Station, VA

7d•Onsite

About The Position

AUSGAR Technologies has an exciting opportunity for a Cybersecurity Analyst to join our team of smart and innovative technical team members working in Norfolk, Virginia. Serve as an Accreditation Analyst and Experiment Support Planner to Navy Warfare Development Center (NWDC) and its missions, functions and tasks serving the function of the Cybersecurity support SME. The Department of the Navy, Commander, United States Fleet Forces Command (USFFC) requires program management, planning, design, execution, analyses and reporting/product delivery support for advancement and execution of the Fleet Experimentation (FLEX) program using Fleet led efforts to achieve Navy Concept for Distributed Maritime Operations (DMO) end states. This position will directly support government/military personnel in coordination with technology providers to ensure their compliance with all current Navy IT, IA and ship/ashore policies associated with the introduction of equipment or modification of ships and aircraft. This position has two distinctive roles. One as a Cybersecurity Analyst, primary and one in a secondary support role as an Experiment Planner. The Cybersecurity Analyst requirements are mandatory and prior experimention planning or test and evaluation associated experience is desired.

Requirements

Active Secret Clearance, with the ability to obtain a TS/SCI.
Requires IAT/IAM Level II certification, i.e., Security+ CE.
Bachelor's Degree in a technical field of study, such as Engineering, Physical Sciences, Math or Management Information Systems from an accredited college or university and five (5) plus years’ experience in Information Assurance operations, as well as two (2) years’ direct experience with RMF and related installation and accreditation processes.
Must have Cybersecurity Analyst, ISSE or similar experience.
Experience with eMASS, Navy RMF, ACAS/NESSUS and SCAP.
Experience with compliance of current Navy IT, IA and ship/ashore policies.
Experience with material solutions that are planned to be connected to a Navy network, such as applications, networks, servers or associated devices.
Knowledge of DoD Cybersecurity policies and procedures.
Knowledge of required IA certifications and accreditations associated with the A&A process.
Knowledge of appropriate A&A documentation that needs to be completed prior to an experiment event, such as A&A documentation for equipment that is required to be installed on a naval vessel or aircraft.
Ability to identify cybersecurity architecture issues to ensure they meet Navy requirements, including reviewing RMF IATT artifacts.

Nice To Haves

Prior experimentation or test and evaluation experience is desired.

Responsibilities

Track, monitor and provide assistance to Assessment and Authorization (A&A) efforts of technology providers selected for operational experiments.
Assist engineering team in developing plans to achieve required accreditations to support installation in advance of experiment participation.
Analyze general information assurance-related technical problems and provide technical support in solving these problems.
Develop/review Interim Authority to Test (IATT) Plans for down-selected initiatives.
Develop/review feasible Risk Management Framework (RMF) process with A&A POCs to meet planning, installation and execution milestones.
Develop timeline and tracker for RMF A&A Package Development.
Coordinate with NAVWAR Navy Authorizing Official (NAO), Security Control Assessor (SCA) Package Support Office to develop IATT in-hand dates and accreditation termination dates for down-selected initiatives.
Conduct Assured Compliance Assessment Solution (ACAS) scanning and Security Content Automation Protocol (SCAP) Testing and manual Security Technical Implementation Guidance (STIG) testing on systems for A&A package development on down-selected initiatives, as required.
Enter/update POA&M and track action items for developing packages in Enterprise Mission Assurance Support Service (eMASS) and identify outstanding action items for Cyber POCs.