Cybersecurity Analyst

Systems Planning and Analysis • Colorado Springs, CO

81d • $85,000 - $95,000

About The Position

Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing Results that Matter. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted. The Space and Intelligence Division (S&ID) provides professional services to the US Space Force, Combatant Commands, Intelligence Community, and NASA. Our work spans all space-related mission areas including Remote Sensing, Satellite Communication, Positioning, Navigation and Timing Services, Command and Control, Space Domain Awareness, Space Superiority, Launch and Infrastructure, Cybersecurity, and Exploration and Science. We provide architectural assessments, systems engineering and integration, software development and related cloud infrastructure support, modeling and simulation, test, planning and execution, cost estimating and analysis, acquisition support, cybersecurity, and executive support. We are trusted partners developing approaches and concepts to anticipate emerging high priority needs, assessing cutting-edge technologies, and supporting capabilities for our National Defense. Our work encompasses all aspects of digital transformation, digital engineering, and digital program management across all space-related customers and classification levels. The Space Systems Group (SSG), part of the Space and Intelligence Division, provides architectural engineering, systems engineering, agile software DevSecOps, cybersecurity, cloud/network/platform infrastructure support, and program management services including acquisition management, financial management, cost estimating, and risk management. We deliver timely and objective assessments and recommendations integrating technical, operational, programmatic, policy, and business analysis. We focus on our key clients in the Space community including the US Space Force's Space Systems Command, one of the three designated Field Commands under the US Space Force. We work tirelessly to provide integrated solutions based on information and communications throughout the chain of command. We provide clear and consistent analysis of major weapon system programs and make recommendations aligned to strategic and leadership goals while balancing the ability to execute on time and on budget within the technical communities. SPA has a need for a Cybersecurity Analyst in Colorado Springs, CO.

Requirements

• Active DoD SECRET clearance.
• High School Diploma and 2-5 years of experience in IT/RMF/GRC; Associates degree equivalent to 2 years experience, bachelor's degree equivalent to 4 years experience; master's degree equivalent to 6 years experience.
• Meets DoD 8140 Cybersecurity Analyst Mid-Level Education, Training or Certification qualifications (CySA, Sec+, etc.).
• Reports to designated work location in Colorado Springs up to full time, based on the needs of the customer.

Nice To Haves

• Top Secret clearance with SCI eligibility.
• Experience with ITIPS.
• Experience with eMASS.
• Experience with FISMA.
• Experience with IASE.
• Experience with Xacta.

Responsibilities

• Support the United States Space Force (USSF) in the development, deployment, maintenance and sustainment of space systems.
• Work in close collaboration with the Information Systems Security Manager (ISSM) and Information Systems Owner (ISO) to ensure security posture is met and maintained.
• Develop security policies, procedures, plans, and all other evidence of compliance with various security controls.
• Create and maintain RMF documentation including eMASS and ITIPS database entries with System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action & Milestones (POA&M), and other artifacts tied to NIST processes.
• Build, maintain, and track system's cybersecurity baselines via eMASS or equivalent.
• Review, assess, create, and update enclave documentation in eMASS for ISSM review and approval.
• Identify, collect, review, and maintain RMF required artifacts.
• Ensure accurate system documentation and configuration logs are maintained.
• Provide written evaluations portraying system progress on RMF compliance.
• Maintain cybersecurity data for systems registered in ITIPS.
• Conduct and/or report annual FISMA security reviews and validate cybersecurity control compliance.
• Conduct annual control validations (ACVs) for all NC3 systems.
• Create and maintain mission common control packages.
• Create and maintain Authority-to-Connect (ATC) guest system packages in eMASS.
• Ensure required Cybersecurity functional activities are conducted during the systems' O&S phase.
• Participate in system's IPTs and sustainment contractor meetings to ensure alignment of cybersecurity requirements.
• Evaluate system's sources of changes and determine security impacts.
• Review and provide inputs to modification packages and program/system documents.
• Review system's test plans and test results for security control implementation.
• Document all findings and perform security impact analysis on system changes.
• Monitor and adhere to the system's A&A schedule deadlines.
• Review annually and provide recommended updates to program cybersecurity policies and plans.
• Review and provide advice on RMF related memorandums for compliance.
• Assist with the cybersecurity vulnerability management plan and risk assessment capability.
• Receive and review ACAS and SCC reports from the sustainment contractor and characterize risk.

Benefits

• Competitive base pay and variable compensation opportunities.
• Health insurance.
• Flexible spending accounts.
• Health savings accounts.
• Retirement savings plans.
• Life and disability insurance programs.
• Programs for both paid and unpaid time away from work.

What This Job Offers

• Career Level: Mid Level
• Industry: Administrative and Support Services
• Education Level: High school or GED
• Number of Employees: 1,001-5,000 employees