Information Security Analyst

By Light Professional IT Services LLC•Scott AFB, IL

2d•Onsite

About The Position

By Light Professional IT Services LLC is seeking an Information Systems Assessment and Authorization analyst to support an IT Service Management effort for USTRANSCOM at Scott Air Force Base in Illinois. The USTC Managed Information Technology Services (MITS) contract provides strategic, technical, and program management guidance and support for the operations and modernization of the combatant command’s infrastructure, systems, and applications, supporting the USTC Command, Control, Communications & Cyber Systems Directorate (TCJ6). The role works on high-visibility or mission-critical program aspects and performs functional duties with some oversight. The schedule is Monday through Friday during normal business hours. After-hours and weekend support may be required during planned or emergency events.

Requirements

Bachelor's degree.
At least four years of experience.
At least one IAT Level II certification: Security+, CECCNA-Security, CySA+, GICSP, GSEC, CND, or SSCP.
At least one Computing Environment (CE) certification or certificate for the technical area of responsibility, such as Network support/defense (e.g., Splunk, Cisco, or McAfee) or an operating system (e.g., Microsoft, Linux, or Solaris).
DoD Secret clearance or higher.

Nice To Haves

Master's degree.
ITILv4 Foundations certification.
One IAM Level II certification: CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, or HCISPP.

Responsibilities

Develop and coordinate authorization documentation, including Systems Categorization, Systems Security Plans, and Systems risk assessments.
Manage Authority to Operate (ATO) packages using continuous monitoring strategies outlined by the ISSM.
Support control assessment, reporting, and monitoring processes using the Cyber Security and Assessment Management (CSAM) system.
Create and maintain minor and major modification documentation.
Maintain waivers and risk assessments for the ISSMs.
Assist ISSMs with decisions affecting the security of their systems and networks.
Facilitate preparations for Contingency/Incident response assessments.
Perform and document risk assessments, analyze security vulnerabilities, and develop metrics to measure associated risks.
Design and develop comprehensive Systems Security Plans covering enclave systems’ infrastructure, policies, and procedures.
Review and validate System Test and Evaluation (ST&E) and Interim Authority to Test (IATT) reviews for new and legacy systems.
Review and conduct NIST-based self-assessments, identify weaknesses, develop Plans of Action and Milestones (POA&Ms), and request risk acceptance for vulnerabilities that cannot be remediated or mitigated.
Create and track POA&Ms to mitigate risks identified through ACAS and STIG processes.
Design and develop Initial Privacy Assessments (IPAs) and Privacy Impact Assessments (PIAs) for major Federal Government IT systems.
Use the eMass tool to manage system security profiles.
Use the Ports, Protocols, and Service Management (PPSM) tool and processes to register ports, protocols, and services used by enclaves.