Analyst Jobs

About The Position

Requirements

• Minimum of 3 years of combined experience performing duties described in the functional description.
• Level 2 certifications (IAM II and or IAT II) under DoD 8140 (or ability to obtain within 6 months of filling the position).

Nice To Haves

• Experienced in the design, analysis and fielding of secure system architectures, software and networks.
• Advanced knowledge of DOD Risk Management Framework (RMF).
• Advanced knowledge of DOD cybersecurity policy or technical cybersecurity solutions.
• Experience with CISCO routers and switches.
• Experience with Windows and Linux operating systems.
• Demonstrated work Experience with usage of Assurance Compliance Assessment Solution (ACAS)
• Demonstrate work experience with mitigating STIG findings and/or assistance with mitigation statements.
• Experience with Enterprise Mission Assurance Support System (eMASS)
• Experience with Vulnerability Remediation Asset Manager (VRAM)
• Experience with Microsoft Office Tools including Word, Excel, PowerPoint and Visio.

Responsibilities

• Support the certification process and testing in accordance with the Risk Management Framework (RMF) and National Institute of Standards and Technology (NIST) policy.
• Prepare RMF documentation for HW, SW, and facilities.
• Provide the analysis and evaluation to design, implement, test and field secure systems, networks, and architectures.
• Enforce information systems security policies ensuring system security requirements are addressed during all phases of the Information System (IS) life cycle.
• Evaluate and recommend actions in the prioritization and deconfliction of system security engineering requirements.
• Identify vulnerabilities and deficiencies and provide recommended actions and risk mitigation steps.
• Implement and ensure information systems security policies and security requirements are addressed during all phases of the acquisition and Information System (IS) lifecycle.
• Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information.
• Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies.
• Assist the government in preparing documentation supporting Authority to Operate (ATO) requirements for developmental hardware, software, and facilities.
• Support system security engineering, integration management solutions, mitigation strategies to reduce cyber-attacks risk.
• Track and monitor Plan of Action and Milestones (POA&Ms) for IT system accreditation.