Cloud Information Security Analyst

Cybersecurity Jobs; Illinois; On-site; USD 80,000 - 120,000; Full time

Job summary

SAIC is seeking a Cloud Information Security Analyst to support IT Service Management efforts for USTRANSCOM at Scott AFB, IL. The role focuses on authorization and assessment for cloud and enclave systems, including documentation, control assessment and risk analysis.

You will coordinate authorization deliverables, manage security profiles, and assist decision-making impacting system security. Requires DoD secret clearance and IAT II certs.

Qualifications

• Experience in DoD information security with secure systems.
• Knowledge of NIST-based assessments and POA&M development.
• Ability to coordinate authorization documentation and risk assessments.

Responsibilities

• Develop and coordinate authorization docs (SSP, Systems Categorization).
• Support CSAM-based control assessment, reporting and monitoring.
• Prepare for Contingency/Incident response assessments.
• Design and develop Systems Security Plans for enclave systems.
• Review ST&E and IATT for new/legacy systems.

Skills

DoD security clearance

IAT Level II certs

AWS cloud concepts

DevOps in Agile

risk assessment

incident response

system security planning

Education

BS in related field

MS acceptable

Tools

CSAM

eMass

POA&M

ACAS

STIG

IATT

Job description

SAIC is seeking a Cloud Information Security Analyst to support IT Service Management efforts for USTRANSCOM at Scott Air Force Base (AFB) in Illinois. This onsite role centers on authorization and assessment activities for cloud and enclave systems, including documentation, control assessment and monitoring, risk assessments, and security and privacy evaluation work.

In this position, you will help coordinate authorization deliverables, manage security profiles through established tools, and support decision-making that impacts system and network security. The work includes preparing for contingency and incident response assessments and aligning security practices to NIST-based evaluations.

Responsibilities

• Develop and coordinate authorization documentation, including Systems Categorization, Systems Security Plan, and systems risk assessment.
• Support control assessment, reporting, and monitoring processes using the Cyber Security and Assessment Management (CSAM) system.
• Create and maintain minor and major modification documentation.
• Maintain waivers and risk assessments for the ISSMs.
• Assist ISSMs with decisions that affect the security of systems and networks.
• Facilitate preparation for Contingency/Incident response assessments.
• Perform and document risk assessments, including analysis of security vulnerabilities and metrics used to measure associated risk.
• Design and develop comprehensive Systems Security Plans defining the enclave systems security profile, including infrastructure, policies, and procedures.
• Review and validate System Test and Evaluation (ST&E) and Interim Authority to Test (IATT) reviews for new and/or legacy systems.
• Review and conduct NIST-based Self Assessments, identify weaknesses, and develop a POA&M for each weakness based on industry best practices.
• Request risk acceptance for vulnerabilities that cannot be remediated or mitigated.
• Create and track Plan of Action and Milestones (POA&M) for mitigation of risks identified via ACAS and STIG processes.
• Design and develop Initial Privacy Assessment (IPA) and Privacy Impact Assessments (PIAs) for major Federal Government IT systems, and support Independent Verification and Validation (IVVs) of security profiles.
• Use the eMass tool to manage the system security profile.
• Use PPSM tool and processes to register ports, protocols, and services used by the enclaves.

Requirements

• 5+ years of experience with a BS (or 3+ years with an MS).
• 0 years with a PhD.
• DoD Secret clearance or higher.
• At least one IAT Level II certification: Security+, CECCNA-Security, CySA+, GICSP, GSEC, CND, or SSCP.
• At least one Computing Environment (CE) certification or certificate aligned to the technical area of responsibility for Network support/defense (for example: Splunk, Cisco, McAfee) or Operating System (for example: Microsoft, Linux, Solaris, AWS Cloud Practitioner, AWS Solutions Architect).
• Familiarity with AWS cloud concepts and services.
• Familiarity with DevOps practices in an agile environment.

Technologies

• Cyber Security and Assessment Management (CSAM) system
• NIST
• POA&M
• eMass tool
• PPSM tool
• ACAS
• STIG
• System Test and Evaluation (ST&E)
• Interim Authority to Test (IATT)
• Initial Privacy Assessment (IPA)
• Privacy Impact Assessments (PIAs)
• Independent Verification and Validation (IVVs)
• Splunk, Cisco, McAfee
• Microsoft, Linux, Solaris
• AWS Cloud Practitioner, AWS Solutions Architect
• Security+; CECCNA-Security; CySA+; GICSP; GSEC; CND; SSCP
• CAP, CASP+ CE, CISM, CISSP (and Associate), GSLC, CCISO, HCISPP
• ITIL Foundations (v4 or higher)

Location, Schedule, and Clearance

• Location: Scott AFB, IL, US (onsite)
• Schedule: Full-Time
• Shift: Day Job
• Travel: No
• Minimum clearance required: Secret
• Clearance level must be able to obtain: None
• Potential for remote work: ORA_ON_SITE

Compensation

Target salary range: USD 80,001 - 120,000 per year (based on experience and other factors).