Information Security Analyst Senior

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Top Secret/SCI

Clearance Level Must Be Able to Obtain:

Top Secret/SCI

Public Trust/Other Required:

None

Job Family:

Information Security

Job Qualifications:

Skills:

Cybersecurity, Information Assurance, Plan of Action and Milestones (POA&M), Risk Management Framework

Certifications:

None

Experience:

10 + years of related experience

US Citizenship Required:

Yes

Job Description:

Responsibilities:

Strategy & Planning

• Supports enterprise information security standards.
• Demonstrates ability to perform complex security analysis of classified and unclassified applications, systems, and enclaves for compliance with downward directed and US BICES program centric security requirements.
• Coordinates with Project Managers (PjM), technologies SMEs (Network, Systems, Cyber Defensive Operations) and other stake holding teams to ensure Cybersecurity dependencies and deliverables are met.
• Supports all gates (KO, SRR, PDR, CDR, TRR, TAR, OAR and PFR) of projects undergoing the USBICES System Engineering Management Plan (SEMP) .
• Attends internal, customer facing and vendor meetings to coordinate project activities, status reports or technical exchange engagements with industry partners.
• Validates and verifies system security requirements definitions, analyzes and establishes system security designs and makes recommendations on solutions to meet security requirements.
• Collects, organizes and delivers diverse technical information on proposed enterprise solution or changes to satisfy the cybersecurity project requirements.
• Demonstrates knowledge of Systems and Networks technologies concepts and operations and can relate this knowledge to cybersecurity dependencies and requirements.
• Critically reviews provided Security Technical Implementation Guides technologies checklist and provides feedback on Vulnerabilities Identifiers (VUL ID) that do not meet enterprise standards or configuration.
• Responsible for the creation of Security Impact Analysis (SIA) document leveraging provided artifacts and works in concert with the A&A branch to obtain ISSO/M approval.
• Helps to develop and advise on the implementation of information security standards.
• Provides tactical and strategic information security advice and examining the ramifications of new technologies.
• Performs all procedures necessary to ensure the security of information systems assets and to protect systems from intentional or inadvertent access or destruction.
• Ability to provide an independent assessment and ensure security controls are implemented correctly, operating as intended, and are producing the desired outcome.
• Maintains current knowledge of relevant technology as assigned.
• Completes weekly and monthly reporting requirements.
   

Operational Management

• May serve as a focal point of contact for the information security team and the customer/organization.
• Advises on physical security, disaster recovery, and data backup systems.
• Manages security audits and vulnerability and threat assessments, and directing responses to network or systems intrusions
• Ensures that all information security systems are functional and secure.
• Provides training to information security personnel.
• Assesses current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement.
• Communicate information security goals and new programs effectively with other managers.
• Participates in special projects as assigned.
• Participates in change management process, assessing security impact of proposed changes.
• Helps to designs and recommend security policies and procedures.
• Manages information systems authorizations using eMASS.

Required Qualifications:

• 10+ years of IT experience experience running security solutions on network/security engineering/security operations, with at least 5+ years Cyber Assurance experience.
• Knowledge of IT security controls, firewalls, SIEM platforms, NAC, DLP, IPS/IDS, encryption, authentication.
• Hands on knowledge of best of class cybersecurity tools commonly associated with DOD environments such as: DISA STIG Viewer, Security Content Automation Protocol (SCAP), Trellix Suite, SIEM technologies
• Hands on experience with Risk Management Framework Assessment and Authorization cybers