Cyber Security Analyst

Markon; Town of Niskayuna (NY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Markon is seeking a Cybersecurity Analyst to support the Naval Nuclear Laboratory (NNL) from Niskayuna, NY. The ideal candidate will help review, remediate, and develop common cybersecurity practices, procedures, and policies for multiple teams across the NNL program.

NOTE: This role requires on-site work at the Niskayuna, NY location regularly, with the possibility of remote work up to 25% of the time.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, or related discipline or equivalent experience.
• 2+ years of IT security project experience and 4+ years in ISSO/ISSM roles.
• Experience developing A&A packages per RMF and working with FedRAMP.

Responsibilities

• Support NIST and RMF directives for NNL programs.
• Assist in development of SSPs and SARs for information systems.
• Use RSA Archer to support information system authorization.
• Contribute to Plans of Actions and Milestones (POA&Ms).
• Develop risk-based decisions for deficiencies found during authorization.

Skills

RMF

FedRAMP

NIST standards

IT security projects

Infrastructure knowledge

Endpoint protection

Vulnerability management

Security+CE

Security clearance

Education

Bachelor's degree in CS/CE or related

Tools

RSA Archer

Job description

Markon is seeking a Cybersecurity Analyst to support the Naval Nuclear Laboratory (NNL) from Niskayuna, NY. The ideal candidate will support the review, remediation, and development of common cybersecurity practices, procedures, and policies for multiple teams across the NNL program.

NOTE: This role does require work to be done onsite at the Niskayuna, NY location regularly, but this position can be done remotely 25% of the time.

Responsibilities

• Support NIST and RMF directives.
• Assisting system owners with development of site security plans (SSPs) and Security Assessment Reports (SARs).
• Use RSA Archer application to support information system authorization.
• Assist in the development of of Plans of Actions and Milestones (POA&Ms)
• Development of Tisk Based Decisions (RBDs) for defiencies founds during the information system authorization process.
• Ensure all solutions adhere to applicable cybersecurity and compliance standards in alignment with DOE and Naval Nuclear Laboratory requirements.

Qualifications

Required

• Must have active DOE L clearance or a DoD Secret clearance to be considered.
• Bachelor’s degree in Computer Science, Computer Engineering, or a related discipline; or equivalent relevant experience.
• 4+ years of experience in the following roles:
• ISSO
• ISSM
• 2+ years of experience supporting development of information systems security authorization packages (A&A) in accordance with the RMF.
• 2+ years of experience working with the Federal Risk and Authoization Management Program (FedRAMP).
• Current Security+CE certification.
• Experience with the RSA Archer application.
• 2+ years working on IT security project teams.
• 1+ year(s) of experience managing IT projects.
• Knowledge of IT infrastructure and services (Data Centers, physical and virtual servers, LAN/WAN, Cloud Infrasstructure/SaaS, etc.)
• Knowledge of current NIST, STIGS, and DoD Cloud computing SRG.
• Knowledge of Infrastructure security, endpoint protection, and vlunerability management.