COMPUTER SYS SECURITY ANLYST 3

The Role

Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products. Conducts risk assessment and provides recommendations for application design. Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access. Uses encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research. May prepare security reports to regulatory agencies.

The candidate will assist system owning engineers with the selection, application and implementation of security controls on various network systems. This will include interpreting cyber security requirements for inclusion in purchase documents and specifications as well as assisting in validating those requirements. The candidate will also assist in the creation and execution of SSPs for systems falling under NIST 800-171 requirements. The ability to quickly learn new technologies and to turn general principles into concrete implementations will be helpful. 

Must Have

Bachelor's Degree and 5 years of relevant exempt experience; 
Master’s Degree and 3 years of relevant professional experience; 
Ph.D. and 0 years of experience.

One of the following may be used as an equivalent to Bachelor's Degree for Information Technology Related Positions Only:

• NNS Apprentice School graduate 
• Navy Nuclear Power School (NNPS) graduate
• Associate's Degree or other formal 2 year program and 2 years of relevant exempt experience or 4 years of relevant non-exempt experience
• Military Paygrade E-5 or above military experience 
• High School/GED and 4 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant exempt experience
• High School/GED and 8 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant non-exempt experience
• A relevant professional certification can be substituted for a Bachelor's Degree.

Nice to Have

o    Previous A&A experience with RMF and DFARS, including SSP and POA&M development
o    Hands-on experience implementing security features on various network and computing technologies
o    Experience with Industrial Control Systems (ICS), including assessment
o    Experience with security assessment and monitoring tools (i.e. ACAS/Nessus, HBSS, Splunk, etc)
o    Experience with Navy shipboard systems 

DoD 8570 recognized certification (i.e. Security+, Network+, CCNA, etc) preferred

The ideal candidate will have experience with eMASS, design and operations of routed networks, virtualization technologies (e.g. Vmware, VirtualBox) including building and securing Virtual Machines (VMs). Experience working with naval shipboard systems is an added plus, and Naval Nuclear experience is added value. The basic skills, training and experience desired include vulnerability assessment tools (Nessus, SCAP, DISA STIGS); securing and hardening operating systems; at least one DoD 8570 recognized certification (at least Network+ or Security+; also desire CISSP, CISM, GSLC, or CASP is an added plus); developing DIACAP/RMF accreditation system packages, including conducting risk assessments and mitigation strategies; and experienced in the identification, analysis and documentation of DoD 8500.01 DIACAP/DoD 8510.01 RMF Information Assurance (IA) Controls’ test results.