Information Assurance and Security, Associate

Peraton • Sierra Vista, AZ

319d • $51,000 - $82,000

About The Position

The position involves Cyber Protection, Assessment and Authorization, and Risk Management Framework (RMF) responsibilities. The role provides cybersecurity functional support for assessments, authorizations, and documentation of Enterprise-fielded systems managed by NETCOM HQ. This includes using the Enterprise Mission Assurance Support Service (eMASS) to record RMF activities such as control implementation of all applicable security controls as identified via information system security categorization in accordance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 and Committee on National Security Systems Instructions (CNSSI) 1253. The number of families and controls will vary depending on the security categorization, the application of overlays (privacy, classified, intel, etc.) and any security control tailoring. The position requires adherence to the DoD cybersecurity policy requirements set forth in DoDI 8500.01, 'Cybersecurity,' and DoDI 8510.01, 'Risk Management Framework (RMF) for DoD Information Technology (IT)' and their successors. Additionally, the role involves providing personnel with knowledge in DoD security hardening, collection, and assessment tools, and expertise with security architectures, firewalls, and network access. The candidate must possess and retain knowledge of the RMF Knowledge Service, the DoD's official site for enterprise RMF policy and implementation guidelines, and review any RMF activities on behalf of NETCOM ensuring adherence to the operational ETPs and Operations Orders hosted on the US Army Component Workspace.

Requirements

• 0 years of experience with a BS/BA or 4 years of experience without a degree.
• Certifications: DCWF Code 722 Intermediate, Certified Chief Information Security Officer (CCISO), Certified Cloud Security Professional (CCSP), Certified in Governance Risk and Compliance (CGRC), CompTIA Cloud+, CompTIA Security+, CompTIA SecurityX (formerly CASP+), or Systems Security Certified Practitioner (SSCP).
• Possess and maintain Top Secret w/SCI security clearance.
• Ability to conduct vulnerability assessments and monitor networks.
• Solid understanding of data transport, encryption, networking, IT systems, and cybersecurity fundamentals.

Responsibilities

• Provide cybersecurity functional support for assessments, authorizations, and documentation of Enterprise-fielded systems managed by NETCOM HQ.
• Use the Enterprise Mission Assurance Support Service (eMASS) to record RMF activities.
• Implement all applicable security controls as identified via information system security categorization.
• Adhere to DoD cybersecurity policy requirements set forth in DoDI 8500.01 and DoDI 8510.01.
• Provide knowledge in DoD security hardening, collection, and assessment tools.
• Possess expertise with security architectures, firewalls, and network access.
• Maintain knowledge of the RMF Knowledge Service.
• Review RMF activities on behalf of NETCOM ensuring adherence to operational ETPs and Operations Orders.

What This Job Offers

• Industry: Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services
• Education Level: Bachelor's degree