Information Security Analyst
About The Position
Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai. Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active-duty and veteran employees.
Requirements
- Active TS/SCI security clearance at time of award.
- Demonstrated ability to independently apply advanced ISSO knowledge to manage ATO compliance, facilitate RMF accreditation, and maintain eMASS registrations across NIPRNET, SIPRNET, JWICS, and SAP environments.
- Expert knowledge of DoD 8500.01, DoD 8510.01, ICD 503, RMF, eMASS, HBSS, ACAS, and NISPOM requirements.
- Strong customer service orientation with demonstrated experience in mission-critical or classified IT support environments.
- Proven analytical and problem-solving abilities.
- Ability to effectively prioritize and execute tasks in a high-pressure environment.
- Good written, oral, and interpersonal communication skills; ability to present ideas in business-friendly and user-friendly language.
- Ability to conduct research into PC and software issues and products as required.
- Highly self-motivated and directed; capable of operating with minimal supervision.
- Keen attention to detail and rigorous documentation standards consistent with DoD compliance requirements.
- Team-oriented and skilled in working within a collaborative environment.
- Bachelor’s Degree in IT, Computer Science, Cybersecurity, or related field; or equivalent combination of vendor certification (including vendor certification in the technology being being applied) and directly relevant professional experience accepted in lieu of degree.
- 8 or more years of progressively responsible professional experience in ISSO operations, RMF/ATO compliance, or cybersecurity in DoD classified environments.
- ITIL v4 Foundations, DoD 8570 IAT Level II or higher, CompTIA CySA+, OR, Certified Authorization Professional (CAP) OR Equivalent cybersecurity certification.
Nice To Haves
- Prior experience supporting a DoD or J6 or OMC customer environment is strongly preferred.
- Certified Information Systems Security Professional (CISSP)
Responsibilities
- Ensuring all OMC information systems meet Department of Defense Instruction 8500.01 mandated cybersecurity requirements.
- Providing ISSO support for OMC systems across NIPRNET, SIPRNET, JWICS, and SAP environments.
- Facilitating information system ATO compliance and re-accreditations IAW DoD 8510.01 and ICD 503.
- Facilitating registration and maintenance of OMC information systems in eMASS, including all RMF artifact preparation, submission, and updates.
- Facilitating the completion and submission of waivers, exceptions to policy requests, and system change requests.
- Providing host-based security system (HBSS) client management.
- Implementing and maintaining anti-virus and malicious code protection for all OMC information systems.
- Providing and facilitating the distribution and installation of security patches.
- Providing or coordinating security vulnerability scanning and reporting using Government-provided applications.
- Supporting scheduled OMC Command Cyber Readiness Inspections (CCRI) and Security Assessment Visits (SAV).
- Providing on-site incident management for NIPRNET, SIPRNET, JWICS, SAP systems, and equipment.
- Developing and maintaining OMC cybersecurity documentation including security plans, SOPs, and risk assessment reports.
- Monitoring OMC systems for unauthorized access, policy violations, and security incidents, and coordinating response actions.
- Coordinating with OMC leadership, DISA, JSP, and other external entities on cybersecurity compliance and incident response.
- Additional duties as assigned.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
