Cyber ISSM Analyst

Cintel Inc; Huntsville (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

Cintel, Inc. is seeking a Cyber ISSM Analyst to support the Cyber Compliance Team at Redstone Arsenal with ISSM-Basic duties for tactical systems. You will participate in RMF A&A activities and collaborate on security controls, documentation, and residual risk management.

Candidates should have DoD RMF experience, eMASS familiarity, and knowledge of NIST controls; U.S. citizenship and security-clearance eligibility are required.

Qualifications

• DoDD 8140 ISSM-Basic certification, education, and experience compliance.
• Associates degree (Engineering, IT or Cyber-related field).
• Experience with DoD STIG requirements, NIST RMF, IAVMs and Cybersecurity tools (ACAS, Nessus, SCC, STIG Viewer).
• Knowledge of RMF process and NIST security controls.

Responsibilities

• Provide accurate technical evaluations of equipment, software, full systems, or network and document security posture against NIST controls.
• Select and assess security controls; complete accreditation packages; implement mitigations and maintain security posture.
• Experience with eMASS and maintaining RMF packages.
• Identify, assess, mitigate, and document system security threats/risks across lifecycle; validate security requirements.
• Collaborate with system developers to update RMF/POA&M documentation.
• Document residual risks and manage Authorization Packages.
• Monitor DoD RMF compliance and evaluate security, resilience, and dependability requirements.
• Work with teams to ensure continued functionality of DoD RMF-compliant systems.

Skills

RMF process knowledge

NIST security controls

DoD 8140 ISSM-Basic certification

System security engineering

Risk assessment

Education

Associates degree in Engineering, IT or Cyber-related field

Bachelor's degree in Engineering, IT or Cyber-related field

Tools

ACAS

Nessus

SCC

STIG Viewer

Job description

Position Title: Cyber ISSM Analyst

Location: Redstone Arsenal

Position Type: Full-Time

Position Description:

The candidate will be supporting a Cyber Compliance Team providing ISSM-Basic support for tactical systems. The person will be a key member of a team performing Hardware and Software Cybersecurity analysis along with key functions supporting the Risk Management Framework (RMF) Assessment and Authorization (A&A) process for data processing, test, and tactical systems. Candidate must be able to prioritize competing requirements for time and resources and be able to adjudicate resource requirements based on understanding of Government customer and mission needs.

Principal Duties and Responsibilities:

• Provide accurate technical evaluations of the equipment, software applications, full systems, or network and documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls.
• Selecting and assessing security controls, timely completion of accreditation packages, formulating and implementing mitigations and maintaining the security posture of systems.
• Must have experience with eMASS and initiating, updating, and maintaining RMF packages.
• Identify, assess, make risk mitigation recommendations, and document system security threats/risks throughout a system's lifecycle; validate system security requirements; formulate and maintain documentation and system certification and accreditation activities (planning, testing, assessing and coordinating).
• Ability to work with system developer to update, maintain, and track RMF and POA&M documentation.
• Documenting preliminary or residual security risks for system operation and manage and approve Authorization Packages.
• Monitoring and evaluating a system's compliance with Department of Defense (DoD) security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results, and analyzing the differences to identify impacts and risks at the software application, system, and network levels.
• Work with teams to provide solutions and to ensure continued functionality of systems within DoD RMF Framework.

Qualifications:

• U.S. Citizen
• Must possess and maintain a US Secret security clearance. Top Secret, SCI eligible, security clearance is a plus.

Required Skills / Experience:

• Meet DoDD 8140 ISSM-Basic certification, education, and experience compliance.
• Associates degree (Engineering, IT or Cyber-related field)
• Experience with implementing and evaluating DoD STIG requirements, NIST RMF, IAVMs and Cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer)
• Knowledge of the Risk Management Framework (RMF) process and NIST security controls
• Knowledge of information system architecture and standards as they apply to cyber security
• Knowledge of NIST SP 800-160, Systems Security Engineering

Preferred Skills / Experience:

• Bachelor's Degree (Engineering, IT or Cyber-related field)
• Strong desire to contribute to overall team success
• Excellent written and oral communication skills
• High degree of proficiency in MS Office Suite

CULTURE REQUIREMENTS:

• Engineers, Analysts, and Developers at Cintel, Inc. are highly motivated, technical, and self-organized. We place a lot of trust in our team members to develop technical solutions for ill-defined problems (i.e. thrive in an environment where the problem is vague, requirements are lacking, and a solution is not obvious). We need problem solvers.
• We want our team members to be self-motivated and eager to learn new skills. If you consider yourself a jack-of-all-trades, and are eager to keep up with the latest trends in technology, you'll fit right in.

ABOUT CINTEL, INC:

CintelInc. is a Small Business providing strategies and services to support an array of Government clients in Software Development, Operational/Tactical and Installation/Facilities Energy, Cyber Security, Modeling and Simulation, Data Science, and Programmatic support.

We offer our clients nimble, unique, and value focused solutions with an emphasis on people, connectivity, communication, and teamwork. Our team believes that people drive solutions. By connecting people, information, teams, and experience we deliver solutions that respond to customer needs.

It is the policy of Cintel that all persons are entitled to equal employment opportunity regardless of their race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or veteran status. These policies shall ensure that the practice of nondiscrimination will be applied in the employment, promotion, upgrading, demotion, transfer, layoff, termination, recall or rehire of personnel. Equal employment opportunity applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation, and training.

Cintel, Inc. expressly prohibits any form of unlawful employee harassment or discrimination based on any of the characteristics mentioned above. Improper interference with the ability of other employees to perform their expected job duties is not tolerated.