SME Information Security Analyst

Goldbelt, Inc.•Oklahoma City, OK

About The Position

The SME Information Security Analyst strengthens the organization’s security framework for enterprise classified information systems and helps ensure the confidentiality, integrity, and availability of information systems. The role provides cybersecurity support across classified and unclassified systems, including standalone and networked systems, and supports system development, planning, implementation, integration, maintenance, asset management, and security controls. The position is contingent upon the successful award of a contract currently under bid.

Requirements

Demonstrated ability to work in dynamic environments and effectively interact with a wide range of DoD and military/civilian personnel.
Verifiable expertise defining, implementing, and sustaining SAP cybersecurity practices and procedures for SAP facilities.
Verifiable expertise with products and systems used by the SAP community, and familiarity with Air Force Instructions and JSIG-series regulations or equivalent.
Hold professional U.S. Department of War Directive 8140.01 certifications relevant to information security and appropriate to the duty position; CompTIA Security+ is given as an example.
At least 3 years of experience.
Must hold a TOP SECRET security clearance.

Nice To Haves

Bachelor’s degree in a related field.

Responsibilities

Ensure the confidentiality, integrity, and availability of classified information systems and data using Air Force-approved network engineering practices, information security standards, and approved industry best practices.
Provide cybersecurity support for standalone and networked systems.
Evaluate approved new technologies before implementation in the organizational environment.
Provide cybersecurity support for application development, planning, network implementation, systems integration, communication support, computer-communication maintenance, asset management, and security controls.
Produce, maintain, and revise Standard Operating Procedures (SOPs), System Security Plans (SSPs), and Approval to Operate documentation; ensure DoW information-system cybersecurity documentation is current and accessible to authorized individuals.
Perform security scans using DISA Security Technical Implementation Guides (STIGs) to verify compliance of security settings and patch levels.
Generate, collect, and preserve information-system audit logs in accordance with the SSP and government customer requirements.
Monitor and document system changes in accordance with the Configuration Management Policy and SSP.
Manage media control, including documentation and accountability for all media.
Continuously monitor IT and the environment for security-relevant events, assess proposed configuration changes for potential cybersecurity-posture impacts, and assess security-control implementation quality against performance indicators.
Provide information-security support and auditing as required by applicable regulations, instructions, and policies for classified and unclassified systems.
Integrate cybersecurity throughout the IT lifecycle on behalf of the Authorizing Official (AO) and in accordance with DoDI 8510.01.
Formally report cybersecurity-related events or configuration changes that affect Air Force IT authorization or adversely affect the security posture to the AO and other affected parties, such as Information Owners (IOs), stewards, and AOs of interconnected IT.