IA/Cyber Analyst

BAE Systems

3d•$118,095 - $200,762•Onsite

About The Position

BAE Systems is seeking an Information Assurance / Cybersecurity Analyst to support our work as a prime contractor on a high-profile U.S. Navy weapon system . Accuracy, integrity, subject matter expertise, and the ability to work well independently and with others are important traits we expect the successful candidate to possess and demonstrate. This position is full-time on-site at Washington Navy Yard. This position is responsible for providing Information Assurance, Cybersecurity, and Information Management to the Navy's Strategic Systems Program Command Information Officer (CIO). As an onsite Information Assurance / Cybersecurity Analyst, you will assist in conducting internal audits of enterprise IT networks, systems, applications, and security tools to ensure they adhere to Navy and DoD security policies and procedures (e.g., STIGs, CTOs, IAVMs, FRAGOs, NTDs, etc.) and applicable frameworks and regulations (e.g., NIST,FISMA, etc.). You will: Review DoD, DON cyber security alerts, notices, IAVMs, etc. Conduct risk assessments and discuss mitigation strategies when needed Review security and data/logs to respond to security incidents on SSP Enterprise systems Support the IAM/ISSM in developing Cybersecurity standards and policies Maintain the SSP Enterprise systems Assessment and Authorization (A&A) packages; topologies; ports, protocol, and services lists; contingency plans, disaster recovery procedures, incident response plans, and POA&Ms As a subject matter expert, you will provide technical guidance to the IAM/ISSM, CIO, Cybersecurity Workgroup (CSWG), Program Managers (PMs), Program Management Officers (PMOs), FBM Partners, etc. on cybersecurity matters and initiatives, including researching new technologies to counter evolving threats. About BAE Systems and the U.S. Navy's Strategic Systems Programs (SSP) Our organization has supported the U.S. Navy's Strategic Systems Programs (SSP) continually since the program's inception in the 1950s. SSP developed the first sea-based, underwater-launched Strategic Weapon System (SWS), a defense system that is truly critical to our national security. For more than six decades, SSP has maintained and upgraded this weapon system and we have been there every step of the way. The sea-based SWS is the ultimate stealthy weapon system and is the first leg of the U.S. nuclear triad. With over 70% of our nation's nuclear arsenal its importance to maintaining world peace cannot be overstated. The development of Columbia, the most advanced nuclear-powered, nuclear-armed submarine ever designed, as well the next D5LE2 weapon system is under way and will begin to be rolled out over the next decade. The Navy projects this system to be operational through 2084, meaning the program will have a total life span of more than 120 years. This is a unique program and BAE Systems employees on this program understand they are part of an important legacy. As a decades long sole source partner on multiple contracts on behalf of our customer, our program has remarkable stability and is concurrently experiencing significant growth. Combined, these factors provide ample opportunity for professional growth and development for capable and talented individuals on our team. BAE Systems, Inc. is the wholly owned U.S. subsidiary of BAE Systems plc. BAE Systems plc provides some of the world's most advanced, technology-led defense, aerospace, and security solutions. As one of the top ten defense contractors, we employ a skilled workforce of around 100,000 people in more than 40 countries. We develop, engineer, manufacture, and support products and systems to protect national security and keep people safe.

Requirements

Full-time on-site at Washington Navy Yard
Bachelor's degree in Cyber Security, Information Systems, Computer Science, Mathematics or related field with at least 6 years of professional work-related experience; or ten years of related professional work experience in lieu of a degree
An Active DoD Secret clearance and ability to obtain and maintain a Top-Secret clearance.
An IAT Level III and IAM Level II certification as specified in the DoD 8140. Or, have a SECNAV 5239 qualifying degree and obtain an IAT Level III and/or IAM II certificate as specified in the DoD 8140.
Ability to obtain and maintain Common Access Card (CAC), badge access to the customer's
Hands on working knowledge of Risk Management Framework.
Experience preparing and reviewing RMF packages.
Experience with information security configuration guides or DISA STIGs.
At least three (3) years-experience supporting and/or maintaining information security technologies.
Experience developing policies, procedures, and technical training materials.
Proficiency discerning the protection needs (i.e., security controls) of information systems and networks evaluating test plans for applicability and completeness assessing security controls based on cybersecurity principles and tenets. (e.g., CNSSI No. 1253, NISTSP 800-53) performing impact/risk assessments interpreting vulnerability scanner results to identify vulnerabilities.
Knowledge of cyber defense and vulnerability assessment tools and their capabilities vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins). and understanding of security technologies including vulnerability scanning (ACAS), firewalls, HBSS and data protection/encryption systems.
OS/CE certification information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption). capabilities and applications of network equipment including routers, switches, bridges, servers, transmission media, and related hardware. business continuity and disaster recovery continuity of operations plans
Ability managing client relationships, including determining client needs/requirements, managing client expectations, and demonstrating commitment to delivering quality results.

Nice To Haves

Bachelor's degree in Cyber Security, Information Systems, Computer Science, Mathematics or related field with at least 6 years of professional work-related experience

Responsibilities

Assist in conducting internal audits of enterprise IT networks, systems, applications, and security tools to ensure they adhere to Navy and DoD security policies and procedures (e.g., STIGs, CTOs, IAVMs, FRAGOs, NTDs, etc.) and applicable frameworks and regulations (e.g., NIST,FISMA, etc.)
Review DoD, DON cyber security alerts, notices, IAVMs, etc.
Conduct risk assessments and discuss mitigation strategies when needed
Review security and data/logs to respond to security incidents on SSP Enterprise systems
Support the IAM/ISSM in developing Cybersecurity standards and policies
Maintain the SSP Enterprise systems Assessment and Authorization (A&A) packages; topologies; ports, protocol, and services lists; contingency plans, disaster recovery procedures, incident response plans, and POA&Ms
Provide technical guidance to the IAM/ISSM, CIO, Cybersecurity Workgroup (CSWG), Program Managers (PMs), Program Management Officers (PMOs), FBM Partners, etc. on cybersecurity matters and initiatives, including researching new technologies to counter evolving threats.

Benefits

health, dental, and vision insurance
health savings accounts
a 401(k) savings plan
disability coverage
life and accident insurance
employee assistance program
a legal plan
discounts on things like home, auto, and pet insurance
paid time off
paid holidays
paid parental, military, bereavement, and any applicable federal and state sick leave
company recognition program to receive monetary or non-monetary recognition awards