Information Assurance Analyst II (JSF)

AMERICAN SYSTEMS • Point Mugu NAWC, CA

1d

About The Position

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Program Mission Support, Engineering & Analysis, and Training.

As an Information Assurance Analyst II, you will support cybersecurity operations and compliance activities to help maintain secure, compliant, and properly authorized information systems. The Information Assurance Analyst II collaborates with senior team members to ensure systems are secure, compliant, and properly configured according to federal regulations. Additionally, in this position you will:

Perform STIG compliance reviews, support internal security control assessments, assist with A&A/RMF activities, and support remediation actions to help maintain secure and compliant systems.
Apply DoD cybersecurity policies, standards, and security principles to support the protection of classified IT systems and maintain compliance with applicable requirements.
Assist in continuous monitoring activities to assess security control effectiveness, track vulnerability and compliance status, and support reporting in accordance with NIST and DoD requirements.
Participate in incident response activities, including identifying, reporting, and helping to resolve security incidents.
Perform risk analysis for system changes, contribute to the Risk Management Framework process and recommend security solutions to address any identify gaps.
Ensure all system documentation is up to date.
Manage and maintain POA&Ms by tracking remediation efforts, validating closure evidence, communicating risk, and supporting timely resolution of identified vulnerabilities.
Oversee Configuration Management: Manage changes to security-relevant software, hardware, and firmware to maintain system security.
May require occasional travel for audits or inspections.

Requirements

• Must be a U.S. Citizen.
• Minimum of 3 years of experience in information assurance, cybersecurity, or a related discipline.
• Must have an active Secret clearance with the ability to obtain a Top Secret with SCI eligibility or have an active Top Secret with SCI eligibility.
• Must hold a current 8570/8140 IAT Level II Certification (Security +, CC, CCND, SSCP)
• Familiarity with federal and DoD cybersecurity standards, including NIST SP 800-37, NIST SP 800-137, RMF, and applicable security control and compliance requirements.
• Understanding network security principles, firewall configuration, IDS/IPS, and encryption methods.
• Strong analytical skills, with the ability to assist in the identification and mitigation of security risks.
• Good communication skills with the ability to work effectively in a team environment and support senior analysts.

Responsibilities

• Perform STIG compliance reviews, support internal security control assessments, assist with A&A/RMF activities, and support remediation actions to help maintain secure and compliant systems.
• Apply DoD cybersecurity policies, standards, and security principles to support the protection of classified IT systems and maintain compliance with applicable requirements.
• Assist in continuous monitoring activities to assess security control effectiveness, track vulnerability and compliance status, and support reporting in accordance with NIST and DoD requirements.
• Participate in incident response activities, including identifying, reporting, and helping to resolve security incidents.
• Perform risk analysis for system changes, contribute to the Risk Management Framework process and recommend security solutions to address any identify gaps.
• Ensure all system documentation is up to date.
• Manage and maintain POA&Ms by tracking remediation efforts, validating closure evidence, communicating risk, and supporting timely resolution of identified vulnerabilities.
• Oversee Configuration Management: Manage changes to security-relevant software, hardware, and firmware to maintain system security.
• May require occasional travel for audits or inspections.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed