Senior Information Assurance Analyst

Description

Location: NAS Patuxent River, MD

Security Clearance Requirement: Top Secret

Telework Eligible? No

As a Senior Information Assurance Analyst, you will provide critical IT, cybersecurity, network management/deployment, Risk Management Framework (RMF) and Authority To Operate (ATO) support to NAVAIR’s Air-to-Air Missiles Program Office (PMA-259). PMA-259 is responsible for the acquisition, development, and sustainment of air-to-air missile systems. This position will be based on-site (not eligible for remote/telework) at NAS Patuxent River, MD and will require up to 10% travel. 

Tasking in this role will be varied and exciting! Primary responsibilities will include: 

• Proposing, coordinating, implementing, and enforcing information system security policies, standards and methodologies
• Implementation of Risk Management Framework (RMF).
• Providing supporting documentation for ATO issuance.
• Performing vulnerability assessments using the Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG), and the Security Content Automation Protocol (SCAP) Compliance Checker, incorporating automated Benchmarks.
• Implementing operating systems and network devices security configuration in accordance with Defense Information Systems Agency (DISA) approved Security Technical Implementation Guides.
• Performing security control continuous monitoring, security audits, risk analysis and developing mitigation strategies for DoD information systems.
• Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL).
• Preparing certification letters and Memoranda of Agreement (MOAs) with system owners for interface and networking implementations.

The job description is not intended to be an all-inclusive list of duties and responsibilities. It is intended to describe the general nature of the position.

Requirements

Education and Experience:

• Bachelor’s degree in Computer Science, Information Systems Management, or a related technical discipline from an ABET-accredited institution. In lieu of a degree, an additional five (5) years of relevant experience is required.
• A minimum of ten (10) years of Information Systems experience, including at least five (5) years in Information Assurance/Cybersecurity (IA/CS).
• At least five (5) years of experience applying the Risk Management Framework (RMF) in accordance with DoDI 8510.01.

Additional Required Qualifications:

• Implementation and assessment of security controls as outlined in CNSSI 1253, NIST SP 800-53, and the Joint Special Access Program Implementation Guide (JSIG).
• Conducting vulnerability assessments using tools such as ACAS, SCAP Compliance Checker, and applying DISA STIGs and automated benchmark standards.
• Configuring operating systems and network devices in compliance with DISA Security Technical Implementation Guides.
• Executing continuous monitoring of security controls, performing audits, conducting risk analyses, and developing mitigation strategies for DoD information systems.
• Identifying and validating Common Criteria and NIAP-certified technologies, as well as products listed on the DISA Approved Products List (APL).
• Preparing certification letters and Memoranda of Agreement (MOAs) in coordination with system owners for interface and network implementations.
• Familiarity with key policy documents including ICD 705, DoDD 5205.07, and DoD 5205.07-M Volumes 1–4.
• Understanding of Joint Special Access Program Implementation Guide processes.

Equally Important:

• You are able to establish and maintain positive relationships with internal and external customers.
• You possess professional and effective communication skills, both verbal and written.
• You take a proactive approach to your work and you're able to accomplish tasks with limited guidance and supervision.
• You have demonstrated critical thinking and problem-solving skills.
• Your organizational skills allow you to manage competing priorities.

ASEC is committed to providing access and reasonable accommodation in its services, activities, programs, and employment opportunities in accordance with the Americans with Disabilities Act and other applicable laws.

Security Clearance Requirement:

• This position requires U.S. citizenship and an active DoD Top Secret clearance. Selected candidate will be subject to a government security investigation and must meet eligibility requiremen