Information Assurance Analyst II (JSF)

American Systems•Point Mugu NAWC, CA

12h

About The Position

AMERICAN SYSTEMS is an employee-owned federal government contractor. The Information Assurance Analyst II supports cybersecurity operations and compliance activities to help maintain secure, compliant, and properly authorized information systems. Working with senior team members, the analyst helps ensure systems are secure, compliant, and configured according to federal regulations. The role supports classified IT systems and applicable DoD and NIST requirements, including security assessments, authorization activities, continuous monitoring, incident response, risk analysis, documentation, remediation tracking, and configuration management. Occasional travel may be required for audits or inspections.

Requirements

Must be a U.S. citizen.
At least 3 years of experience in information assurance, cybersecurity, or a related discipline.
Must have an active Secret clearance with the ability to obtain Top Secret with SCI eligibility, or an active Top Secret clearance with SCI eligibility.
Must hold a current 8570/8140 IAT Level II certification, such as Security+, CC, CCND, or SSCP.
Familiarity with federal and DoD cybersecurity standards, including NIST SP 800-37, NIST SP 800-137, RMF, and applicable security control and compliance requirements.
Understanding of network security principles, firewall configuration, IDS/IPS, and encryption methods.
Strong analytical skills and the ability to assist in identifying and mitigating security risks.
Good communication skills and the ability to work effectively in a team environment and support senior analysts.
Must obtain and maintain the appropriate level of Security Clearance or Public Trust as determined by the government.

Responsibilities

Perform STIG compliance reviews and support internal security control assessments.
Assist with A&A/RMF activities and support remediation actions.
Apply DoD cybersecurity policies, standards, and security principles to protect classified IT systems and maintain compliance.
Assist with continuous monitoring to assess security control effectiveness, track vulnerability and compliance status, and support reporting under NIST and DoD requirements.
Participate in incident response activities, including identifying, reporting, and helping resolve security incidents.
Perform risk analysis for system changes, contribute to the Risk Management Framework process, and recommend security solutions to address identified gaps.
Ensure system documentation is up to date.
Manage and maintain POA&Ms by tracking remediation efforts, validating closure evidence, communicating risk, and supporting timely resolution of identified vulnerabilities.
Oversee configuration management by managing changes to security-relevant software, hardware, and firmware to maintain system security.
Travel occasionally for audits or inspections, as needed.