Senior Cybersecurity Analyst - 26-040 - Hybrid - 2 positions available

AUSGAR Technologies•Newport, RI

9d•Hybrid

About The Position

AUSGAR Technologies is hiring two Senior Cybersecurity Analysts to support a Department of Defense program in Newport, Rhode Island. The role supports the program throughout system engineering, deployment, and sustainment by executing the Risk Management Framework (RMF) process through all phases. The position works with program Information System Security Managers (ISSMs), external stakeholders, and engineering teams to manage cybersecurity authorization, risks, vulnerabilities, and compliance issues. The posting describes the role as hybrid, with onsite and remote work; it gives differing estimates of the split (approximately 60% onsite/40% remote in the introduction and 70% onsite/30% remote later). Expected travel is up to 10%. An active Secret clearance is required upon hire, and the position requires a DoD 8140.03 IAT II certification. Compensation is listed as $140,000–$170,000, based on qualifications and other factors, with a comprehensive benefits package.

Requirements

Active Secret security clearance upon hire.
DoD 8140.03 IAT II certification.
Bachelor’s degree in a relevant discipline from an accredited college or university and 8+ years in the cybersecurity field, or an equivalent combination of work experience and education.
DoD RMF experience in an ISSE role using eMASS, including developing or updating RMF SSPs, documenting NIST 800-53 security control implementations, and developing SAPs, Security POA&Ms, and RARs.
Experience using eMASS.
Experience reviewing DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs), Security Content Automation Protocol (SCAP), and Assured Compliance Assessment Solution (ACAS) results.
Good knowledge of DoD cybersecurity policies and procedures.
Strong written and verbal communication skills.
Ability to work independently and be a self-starter.
Ability to travel up to 10%.

Responsibilities

Execute the Risk Management Framework process through all phases of system engineering, deployment, and sustainment.
Categorize systems and develop System Security Plans (SSPs), Security Assessment Plans (SAPs), security control implementation documentation, Security Program Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports (RARs).
Work with program ISSMs and external stakeholders.
Identify cybersecurity vulnerabilities and compliance issues and work with the program to incorporate findings into system POA&Ms.
Work with the ISSM to respond to data calls and TASKORDS/OPORDS.
Provide the ISSM with status updates on RMF authorization status for various RMF packages.
Track and identify cybersecurity risks and report them to ISSMs, cyber leads, and engineering teams.
Advise technology stakeholders, program initiatives, and accrediting authorities on security requirements, cybersecurity trends and solutions, risk assessments, and mitigations.