Information Assurance Analyst/ Cyber RMF Analyst

Ingalls, part of C3 Integrated Solutions

At Ingalls Information Security, we are pioneers in managed security services and incident response. We're committed to harnessing the power of technology to drive innovation, efficiency, and security across our operations and for our customers.

 

To learn more about the requirements, and understand Ingalls (part of C3) services, please review the following:

https://iinfosec.com/government-programs/

https://iinfosec.com/authorization-to-operate-ato-support/

 

Information Assurance Analyst/Cyber RMF Analyst

Support a DoD client’s Risk Management Framework (RMF) program. Provide technical support and apply expertise in assessing information system compliance with DoD and Air Force (AF) RMF standards. Develop, review, verify, and validate required DoD RMF documentation and artifacts in accordance with DoD Instruction 8510.01, RMF for DoD IT, and the AF RMF Process Guide. Analyze and process the artifacts required to obtain and maintain the Authority to Operate (ATO) for information systems and applications. Perform quality assurance reviews for required content in all packages in the Assessment and Authorization (A&A) process. Support the client in conducting RMF checkpoint and collaboration activities. Perform RMF and FISMA data collection, analysis, reporting, and metrics generation.

What You'll Do

• Determines information assurance and security standard’s
• Develops and implements information assurance/security standards and procedures
• Establishes and satisfies information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands
• Supports customers at the highest levels in the development and implementation of doctrine and policies
• Applies experience to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features
• Performs analysis, design, and development of security features for system architectures
• Analyzes general information assurance-related technical problems and provides basic engineering and technical support in solving these problems

What You'll Bring

• 2+ years of experience with DoD Cybersecurity, information assurance, or Risk Management Framework (RMF)
• Experience with using RMF tools to process and update Assessment & Authorization (A&A) packages
• Working knowledge of eMASS (Enterprise Mission Assurance Support Service) and Security Technical Implementation Guides (STIGs)
• Knowledge of the National Institute of Standards and Technology (NIST) RMF Special Publications
• Must comply with IAT Level II or IAM Level II
• Ability to pass DoD Tier 1 background check
• DoD Workforce Certification
• Excellent Project Management skills
• Possession of excellent oral and written communication skills
• Outstanding time management skills

Preferred Qualifications

• BS degree in CS, Cybersecurity, Engineering, or a related scientific or technical field
• Understanding of NIST 800-53

This a remote US-based position with minimal travel.

This role will support a contract that runs through September 2024. We anticipate this contract will be extended. If it is not extended, we will work to provide opportunity with another project. 

 

C3's Core Values:

• Team Human: Respecting all humans is a critical part of who we are at C3. We practice integrity in all interactions, we empathize with others, we create a supportive work environment, and we support the communities in which we live and operate.
• Security First: At the cornerstone of our business, we prioritize security above convenience, cost or efficiency. A “security-first” approach means we practice what we preach and we lead by example for our clients.
• Be an Advocate: We are passionate in our advocacy for our customer’s success and a path to the best solution for their business. We embrace feedback, put ourselves in your shoes and advocate for your interests as our own.
• Embrace Change: It's a practical necessity in an industry that never stands still. As a new entity born from the merger of two top-ranked CMMC-focused IT services companies, we're keenly aware that our success hinges on our ability to adapt - whether that means integrating new platforms, refining processes, or keeping pace with changing guidelines.