Information Security Analyst Senior

American Systems•Colorado Springs, CO

About The Position

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Program Mission Support, Engineering & Analysis, and Training.

Requirements

BS/BA
8-10 years related experience
US Citizenship
Active Top Secret Clearance

Responsibilities

Leads Red LAN cybersecurity operations, including RMF execution, ATO/ATC sustainment, body-of-evidence oversight, cybersecurity assessment of system/interface/CDS changes, and coordination with the ISSM, SCA, AO, PMO, and system stakeholders.
Directs continuous monitoring, audit-review, vulnerability/compliance remediation, POA&M prioritization and closure, cybersecurity reporting, and authorization-package updates across Secret, TS/SCI, and TS/SCI/SAP boundaries.
Designs, develops and implements security requirements within an organization’s business processes.
Prepares documentation from information obtained from customer using accepted guidelines such as DITSCAP (DoD Information Technology Security Certification and Accreditation Process).
Prepares Security Test and Evaluation plans.
Provides certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments.
Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps.
Develops and completes system security plans and contingency plans.
Recommends system enhancements to improve security deficiencies.
Develops, tests and integrates computer and network security tools.
Secures system configurations and installs security tools, scans systems to determine compliancy and report results and evaluates products and various aspects of system administration.
Conducts security program audits and develops solutions to lessen identified risks.
Develops strategies to comply with privacy, risk management, and e-authentication requirements.
Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.
Evaluates, develops and enhances security requirements, policy and tools.
Aids in computer incident investigations.
Performs vulnerability assessments including development of risk mitigation strategies