Cyber Security Analyst II

Afognak Native Corporation; San Diego (CA); On-site; USD 90,000 - 105,000; Full time

Job summary

Alutiiq Information Management, LLC a subsidiary of Alutiiq, LLC is seeking a Cyber Security Analyst II to join our team in San Diego, CA for NIWC Pacific DAME project. The role focuses on RMF package development, documentation and compliance across DISA/NAVFAC standards.

You will assess security controls, STIGs, ACAS, and IAVA requirements, coordinate with system admins, and maintain VRAM and DITPR-DON/DADMS records. US citizenship and a Secret clearance are required.

Qualifications

• BA/BS in Information Technology, Cyber Security, Computer Science, or related discipline.
• Minimum DoD 8570.01M IAT Level II; IAM Level III preferred.
• Must be a U.S. Citizen; Secret Clearance w/SSBI.
• 2–4 years in DoD IT or Cyber Security.
• Experience with eMASS, ACAS, STIGs, VRAM.

Responsibilities

• Support NAVWAR/NIWC Pacific ISSM/CIO with RMF package development as technical ISSE.
• Assemble documentation for RMF packages per ISSM and CNIC/NAVFAC guidance.
• Assess and implement security controls and STIGs; run ACAS scans.
• Assist sysadmins with STIG/IAVA implementation and security best practices.
• Process, maintain compliance, verify Nessus/STIG/SCAP, report findings, propose mitigations; construct POA&M.
• Maintain compliance in VRAM and DITPR-DON/DADMS.
• Understand NIST, CNSS, CTOs/TASKORDS, and IAVMs.
• Create system boundary and data flow diagrams with PPS lists and ACAS.

Skills

RMF

NIST SP 800-53

IAT II

Security Clearance

Education

BA/BS in IT or related

Tools

eMASS

ACAS

STIGs

VRAM

DITPR-DON/DADMS

Job description

Description

Alutiiq Information Management, LLC a subsidiary of Alutiiq, LLC is seeking a

• Support NAVWAR, NIWC Pacific ISSM / CIO with RMF package development as technical ISSE.
• Assemble all required documentation as outlined by the ISSM and CNIC/NAVFAC for the RMF packages.
• Assess and implement security controls, Security Technical Implementation Guides (STIGs), and Assured Compliance Assessment Solution (ACAS) scans in accordance with governing policies for servers, networking equipment, workstations, etc.
• Assist system administrators with implementation or application for all applicable Security Technical Implementation Guide (STIG), industry best security and design practices, and implement all applicable Information Assurance Vulnerability Alert (IAVA) security requirements.
• Process, maintain compliance, and verify completion of Nessus, STIG, and SCAP files, report any open findings or vulnerabilities to the program, propose and implement mitigations as required and construct necessary POA&M when required.
• Maintain compliance in Vulnerability Remediation Asset Manager (VRAM) and DoD Information Technology Portfolio Repository-Navy (DITPR-DON)/ DON Application and Database Management System (DADMS).
• Understand NIST, Committee for National Security Systems (CNSS), DoD/DON Communications Task Orders (CTOs, TASKORDS), and Information Assurance Vulnerability Management (IAVMs).
• Create system authorization boundary diagrams and data flow diagrams encompassing traceability back to Hardware, Firmware, Software, Ports, Protocols and Services (PPS) lists, and ACAS while complying with DISA/NAVFAC standards.
• Review system PPS list and ensure compliance IAW Department of Defense Instruction (DoDI) 8551.01.
• Interacts frequently with internal personnel and outside representatives at various levels.

Description

Alutiiq Information Management, LLC a subsidiary of Alutiiq, LLC is seeking a Cyber Security Analyst II to join our team in San Diego, CA. This effort is being lead by Naval Information Warfare Command (NIWC) Pacific in support of the Digital Additive Manufacturing Environment (DAME) project. This material system will be the result of an integration effort to provide for 3D Print Exchange and Product Lifecycle Management (PLM) capabilities using networked systems worldwide that will ultimately provide for a Joint Service 3-D Printing capability to the Department of War (DoW).

• Support NAVWAR, NIWC Pacific ISSM / CIO with RMF package development as technical ISSE.
• Assemble all required documentation as outlined by the ISSM and CNIC/NAVFAC for the RMF packages.
• Assess and implement security controls, Security Technical Implementation Guides (STIGs), and Assured Compliance Assessment Solution (ACAS) scans in accordance with governing policies for servers, networking equipment, workstations, etc.
• Assist system administrators with implementation or application for all applicable Security Technical Implementation Guide (STIG), industry best security and design practices, and implement all applicable Information Assurance Vulnerability Alert (IAVA) security requirements.
• Process, maintain compliance, and verify completion of Nessus, STIG, and SCAP files, report any open findings or vulnerabilities to the program, propose and implement mitigations as required and construct necessary POA&M when required.
• Maintain compliance in Vulnerability Remediation Asset Manager (VRAM) and DoD Information Technology Portfolio Repository-Navy (DITPR-DON)/ DON Application and Database Management System (DADMS).
• Understand NIST, Committee for National Security Systems (CNSS), DoD/DON Communications Task Orders (CTOs, TASKORDS), and Information Assurance Vulnerability Management (IAVMs).
• Create system authorization boundary diagrams and data flow diagrams encompassing traceability back to Hardware, Firmware, Software, Ports, Protocols and Services (PPS) lists, and ACAS while complying with DISA/NAVFAC standards.
• Review system PPS list and ensure compliance IAW Department of Defense Instruction (DoDI) 8551.01.
• Interacts frequently with internal personnel and outside representatives at various levels.

Payrate: $90,000 to $105,000 Annually

Requirements

• BA/BS in Information Technology, Cyber Security, Computer Science, or related discipline.
• Minimum compliance with DoD Manual 8570.01M (or equivalent) Cyber Information Technology/Cybersecurity Workforce IAT Level II required, IAM Level III preferred.
• Must be a U.S. Citizen
• Must currently possess a Secret Security Clearance w/SSBI
• 2 – 4 years in Information Technology or Cyber Security environment supporting the Department of Defense
• Enterprise Mission Assurance Support Service (eMASS)
• Assured Compliance Assessment Solution (ACAS)
• Security Technical Implementation Guides (STIGs)
• DON Vulnerability Remediation Asset Manager (VRAM)

Proficiency In The Following Disciplines

• Microsoft operating systems
• Microsoft SQL
• Red Hat Linux
• Cisco
• Aruba wireless
• MS Office
• MS Visio

Experience Preferred But Not Required

• LENEL
• Milestone
• Ability to effectively communicate verbally and in writing
• Ability to excel in a fast paced program office environment
• Possess attention to detail
• Experience with developing Assessment and Authorization (A&A) documentation
• Experience with the Risk Management Framework (RMF) and NIST SP 800-53 rev 4 as an Information Systems Security Engineer (ISSE)
• Knowledge of US naval communication suites in areas such as LAN, WAN, and RF paths.
• Working knowledge of servers, software, networking equipment, and other infrastructure elements required
• Familiar with the DoD Information Technology Portfolio Repository-Navy (DITPR-DON)/DON Application and Database Management System (DADMS) and the requirements for their use
• Current Security+ certification