Information Security Analyst

Brandes Associates•Point Mugu, CA

4d•Onsite

About The Position

BAI, a defense contractor, is seeking an Information Security Analyst with 3+ years of experience, to support the implementation, maintenance, and continuous improvement of cybersecurity practices across assigned information systems and environments at Naval Base Ventura Point Mugu Ca. This position executes security protocols and procedures, monitors compliance with established security requirements, conducts assessments and audits, supports accreditation activities, and provides technical guidance on security tools and controls. Opportunities for career advancement, excellent benefits and long-term stability are some of the advantages of our growing, employee-focused company.

Requirements

3+ years of experience
IAT/IAM II as per DoD Manual 8140
Certifications: Security+, CISSP, or NSA equivalent
Experience working with the Risk Management Framework processes
Strong DEVSECOPS
Excellent communication and interpersonal skills—verbal, non-verbal, written, and listening for staff, customer, and organizational level communications, both formal and informal
Ability to work independently, self-starter
Working knowledge and use of Microsoft Office suite programs, MS Word, Excel, Access, and PowerPoint
Must have a T5 background investigation, active Top Secret Security Clearance, and be able to maintain a DoD Top Secret Security Clearance.
Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information.
The applicant must have US citizenship at the time of application.

Nice To Haves

proficient with Linux is a plus

Responsibilities

Between 3 and 10 years of practical CEAT computer security experience in secure network and system design, analysis, procedure/test generation, test execution and implementation of computer/network security mechanisms
Works closely with the Information Systems Security Manager (ISSM), Cybersecurity Lead, system owners, and functional support/technical teams to protect computer networks, information systems, digital files, and critical electronic infrastructure
Implements and monitors security controls, protocols, and procedures
Protects networks, systems, information, and critical infrastructure
Conducts vulnerability assessments, audits, risk reviews and rapid response reporting and data calls
Monitors for and respond to security incidents, breaches, and malware in coordination with the ISSM and/or Cybersecurity Lead
Prepares and maintains accreditation and compliance documentation
Supports the implementation and use of security tools
Provides security training and recommend improvements to security processes and controls
Integrates security into a continuous integration, continuous delivery, and continuous deployment pipeline to minimize vulnerabilities in software code
Ensures the entire DevOps team, including developers and operations teams, share responsibility for following security best practices
Enables automated security checks at each stage of software delivery by integrating security controls, tools, and processes into the DevOps workflow
Assists in the continuous integration, continuous delivery/deployment (CI/CD), continuous feedback, and continuous operations cycle