Cloud Information Security Analyst — DoD Authorization & Risk

Science Applications International Corp.; Illinois; On-site; USD 80,000 - 120,000; Full time

Job summary

Science Applications International Corp. (SAIC) seeks an Information Systems Assessment and Authorization analyst for the Cloud team to support IT Service Management for USTRANSCOM at Scott Air Force Base in Illinois.

The role focuses on security documentation, risk assessment, and formal authorization packages for mission-critical systems. The candidate will work on high-visibility tasks, supporting CSAM-based control assessments, ST&E/IATT reviews, and ROA&M tracking while collaborating with

Qualifications

• 5+ Years with BS 3+ Years with MS 0 Years with PhD.
• DoD Secret clearance or higher.
• Must have at least one of these IAT Level II certifications: Security+, CECCNA-Security, CySA+ , GICSP, GSEC, CND, SSCP.
• Must have at least one Computing Environment (CE) certification or certificate for the technical area of responsibility for Network. support/defense (e.g., Splunk, Cisco, McAfee, etc.) OR Operating System (e.g., Microsoft, Linux, Solaris, AWS Cloud Practitioner, AWS Solutions Architect etc).
• Familiarity with AWS cloud concepts and services.
• Familiarity with DevOps practices in an agile environment.

Responsibilities

• Develop and coordinate all authorization documentation including the Systems Categorization, Systems Security Plan, and Systems risk assessment.
• Support the control assessment, reporting and monitoring processes using the CSAM system.
• Create and maintain all minor/major modification documentation.
• Maintain all waivers and Risk assessment for the ISSMs.
• Assist the ISSMs with decisions that affect security of their systems and networks.
• Facilitate preparations for Contingency/Incident response assessments.
• Perform and document risk assessments, analyzing security vulnerabilities and metrics to measure risks.
• Design and development of comprehensive Systems Security Plan covering infrastructure, policies, and procedures.
• Review and validate ST&E and IATT reviews for new/legacy systems.
• Review and conduct NIST-based Self Assessments and develop POA&M for weaknesses.
• Create and track POA&M for mitigation of risks identified via ACAS and STIG processes.
• Design and development of Initial Privacy Assessment (IPA) and Privacy Impact Assessments (PIAs).
• Utilize the eMass tool to manage the security profile for the system.
• Utilize PPSM tool/processes to register ports, protocols and services in use by the enclaves.

Education

DoD Secret clearance

Job description

Science Applications International Corp. (SAIC) seeks an Information Systems Assessment and Authorization analyst for the Cloud team to support IT Service Management for USTRANSCOM at Scott Air Force Base in Illinois.

The role focuses on security documentation, risk assessment, and formal authorization packages for mission-critical systems. The candidate will work on high-visibility tasks, supporting CSAM-based control assessments, ST&E/IATT reviews, and ROA&M tracking while collaborating with