Senior Information Systems Analyst

MAG Aerospace•Lexington Park, MD

1d•$100,000 - $140,000•Onsite

About The Position

MAG Aerospace is seeking to identify a Senior Information Security Analyst to support operations based out of Webster Outlying Field (WOLF), MD. This position will provide security engineering and assessment work in accordance with established procedures and protocols while ensuring the demonstrable Confidentiality, Integrity and Availability (CIA) of information assets for authorized internal and external users by reviewing, validating, classifying, and responding to security events and cyber-attacks. This position is contingent upon receipt of government funding and hiring authorization. At this time, a start date has not been determined. We are seeking to identify and engage highly qualified professionals for a talent pipeline. Applicants may be contacted as program funding and hiring approvals are finalized.

Requirements

10 years of required experience as a ISSM or Information Security Analyst.
Of the minimum ten (10) years of required experience, at least five (5) years of the experience must be in all phases of IA and accreditation process for Top Secret networks.
Additionally, at least five (5) years of experience maintaining systems accreditation documentation.
MUST HAVE an Active Certified Information Systems Security Professional (CISSP) OR CompTIA Advanced Security Practitioner (CASP).
Master’s Degree in a Technical, IT or Computer Science Discipline.
Must currently have a Top Secret Security Clearance.
US Citizenship required.
Knowledge of a variety of information technology and cybersecurity competencies related to automated support, including an understanding of sophisticated analytical concepts, principles, techniques, and practices.
Comprehensive knowledge and demonstrated experience in managing procedures, policies, and standards such as NIST 800-171, 800-53.
Excellent communication skills, both oral and written, to initiate and respond to technical assistance requests and present information to other employees of the organization.
Ability to conduct studies and recommend a course of action on proposed projects or refinements; ability to lead development of overall plans, criteria, and programming for the purposes of implementing new cybersecurity policies.
Must also be self-motivated, well organized, and detail oriented to be able to take initiative and exercise judgement to ensure the cybersecurity of the company is maintained with the exponential growth of the enterprise.

Responsibilities

Assist with meeting the requirements of all four domains (Security Oversight, IT Risk Assessment, Security Engineering, and Security Operations) and focus on depth upon the domain requirements of Security Operations and IT Risk Assessment.
Works with assistance from senior staff to define security requirements, track security specific issues/concerns, provide security solutions, identify & communicate vulnerabilities being introduced into the environment, and identify exceptions to policy.
Assists in the development of enterprise-wide designs as well as research, develops and recommends architectural policies and practices for current and future initiatives from definition phase through implementation with guidance from senior staff.
Manages internal security initiatives, with assistance from senior staff, that require little assistance from other groups. This includes writing requirements, managing the procurement process, initial installation, and configuration, and overseeing the entire project lifecycle.
Researches, evaluates, and stays current on emerging tools, techniques, and technologies.
Isolate, define, and analyze issues or conditions regarding the IT department.
Resolve critical problems in all the US based locations.
Establish criteria, formulate projects, assess program effectiveness, and investigate a variety of technical conditions, problems, or issues.
Perform research, conduct studies, and adapt computer technology to meet the MAG IT department program plans to ensure the enterprise is compliant with all applicable Federal DoD Cybersecurity requirements.
Provide authoritative information security advice and guidance to the Director for the Information Technology Department.
Create policies, implement controls, and provide training as necessary to ensure adherence to all applicable Federal DoD cybersecurity standards, HIPAA, and other relevant technology requirements.
Perform risk assessment activities to include the mitigation for vulnerabilities at regular intervals.
Maintain a record of any security violations and applicable resolutions.
Apply and provide significant security services in support of an agency’s operations through the implementation of a risk management framework, which may include establishing technical security controls, providing continuous monitoring, conducting cyclical vulnerability testing, overseeing security assessments and authorizations, and responding to network security incidents.
Develop and carry out information security plans and policies.
Develop strategies to respond to and recover from a security breach.
Develop or implement open source/third-party tools to assist in detection, prevention, and analysis of security threats.
Enterprise Risk Management & Analysis.
Management of Globally Deployed Information Assets.
Implementation & Monitoring of NIST SP 800-171 (or 800-53) Controls.