Cyber ISSM Analyst

sgi; Huntsville (AL); On-site; USD 85,000 - 125,000; Full time

Benefits offered by this job

Flexible work schedules

Educational assistance

Career development

Medical insurance

Life insurance

Job summary

Signalink, Inc. seeks a Cyber ISSM Analyst to support a Cyber Compliance Team performing RMF A&A for tactical DoD systems. You will evaluate hardware/software security postures, select controls, and maintain RMF documentation across the system lifecycle.

Requirements include DoD RMF knowledge, ISSM-Basic certification, and experience with eMASS, ACAS, Nessus, and STIG tools. U.S. citizenship and ability to obtain a Secret clearance are required.

Qualifications

• U.S. citizenship required.
• Ability to obtain and maintain a Secret clearance.

Responsibilities

• Provide technical evaluations of equipment/software and document security posture against NIST controls.
• Select and assess security controls; complete accreditation packages and implement mitigations.
• Experience with eMASS and RMF packages; maintain RMF documentation.
• Identify risks across a system’s lifecycle and document security threats/risks.
• Collaborate with developers to update RMF/POA&M documentation.
• Document residual security risks and manage Authorization Packages.
• Monitor DoD RMF compliance and validate results against requirements.
• Work with teams to ensure continued functionality within DoD RMF framework.

Skills

DoD RMF knowledge

NIST controls knowledge

Communication skills

Education

Associates degree in Engineering/IT/Cyber

Bachelor’s degree in Engineering/IT or Cyber-related field

Tools

eMASS

ACAS

Nessus

SCC

STIG Viewer

Job description

Overview

We are seeking a Cyber ISSM Analyst to join our team. The candidate will be supporting a Cyber Compliance Team providing ISSM-Basic support for tactical systems. The person will be a key member of a team performing Hardware and Software Cybersecurity analysis along with key functions supporting the Risk Management Framework (RMF) Assessment and Authorization (A&A) process for data processing, test, and tactical systems. Candidate must be able to prioritize competing requirements for time and resources and be able to adjudicate resource requirements based on understanding of Government customer and mission needs.

Key Duties and Responsibilities:

• Provide accurate technical evaluations of the equipment, software applications, full systems, or network and documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls.
• Selecting and assessing security controls, timely completion of accreditation packages, formulating and implementing mitigations and maintaining the security posture of systems.
• Must have experience with eMASS and initiating, updating, and maintaining RMF packages.
• Identify, assess, make risk mitigation recommendations, and document system security threats/risks throughout a system’s lifecycle; validate system security requirements; formulate and maintain documentation and system certification and accreditation activities (planning, testing, assessing and coordinating).
• Ability to work with system developer to update, maintain, and track RMF and POA&M documentation.
• Documenting preliminary or residual security risks for system operation and manage and approve Authorization Packages.
• Monitoring and evaluating a system's compliance with Department of Defense (DoD) security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results, and analyzing the differences to identify impacts and risks at the software application, system, and network levels.
• Work with teams to provide solutions and to ensure continued functionality of systems within DoD RMF Framework.

Basic Qualifications:

• U.S. citizenship.
• Ability to obtain and maintain a Secret clearance.
  

Required Skills/Experience:

• Meet DoDD 8140 ISSM-Basic certification, education, and experience compliance.
• Associates degree (Engineering, IT or Cyber-related field)
• Experience with implementing and evaluating DoD STIG requirements, NIST RMF, IAVMs and Cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer)
• Knowledge of the Risk Management Framework (RMF) process and NIST security controls
• Knowledge of information system architecture and standards as they apply to cyber security
• Knowledge of NIST SP 800-160, Systems Security Engineering

Preferred Skills/Experience:

• Bachelor’s Degree (Engineering, IT or Cyber-related field)
• Strong desire to contribute to overall team success
• Excellent written and oral communication skills
• High degree of proficiency in MS Office Suite

What We Offer:

Our industry-leading benefits package goes above and beyond competitive salary commensuration for those just beginning their career and seasoned professionals alike. Our comprehensive benefits package includes full coverage medical insurance, multiple retirement plan options, short- and long-term disability, life insurance, and work/life benefits including career development and recognition programs. Other perks we offer are flexible work schedules, company-sponsored events, and educational assistance.

Disability Accommodation for Applicants:

Signalink, Inc. is an Equal Employment Opportunity employer and provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in its job application procedures. If you have any difficulty using our online systems and need accommodation due to a disability, you may use the following alternative email address to contact us about your interest in employment [e-mail].

Company Overview:

Founded in 2005, Signalink is an SBA certified Service-Disabled Veteran Owned Small Business (SDVOSB) specializing in Engineering Design and Development, Prototyping, and Systems Integration to the Department of Defense, Aerospace, and Commercial Industries.

AS9100D with ISO 9001:2015 certified with a commitment to excellence, Signalink provides the very best Information Engineering, Technical Solutions & Services and Operations support to our customers cost effectively and efficiently. We will accomplish everything we do in an ethical, honest, and professional manner.

Signalink, Inc., provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, gender identity, sexual orientation, pregnancy, status as a parent, national origin, disability (physical or mental), family medical history or genetic information, political affiliation, military service, or other non-merit, based factors