Cybersecurity Analyst

Spectra Tech, Inc.; West Mifflin (Allegheny County); On-site; USD 65,000 - 95,000; Full time

Job summary

An established industry player is on the lookout for a skilled Cybersecurity Analyst to join their team in West Mifflin, PA. This role involves executing critical NIST directives and supporting the Risk Management Framework to ensure the security of naval nuclear systems. The ideal candidate will have a strong background in security control validation and experience with RSA Archer, along with relevant certifications such as Security+, CISSP, and CCSK. If you are passionate about cybersecurity and want to make an impact in a vital sector, this opportunity is perfect for you.

Qualifications

• 4+ years in security control validation or assessment roles.
• 2+ years supporting NIST security authorization packages.

Responsibilities

• Execute NIST directives to support Risk Management Framework.
• Assist in developing System Security Plans and Security Assessment Reports.

Skills

Security Control Validation

NIST 800-37

NIST 800-53

FedRAMP

RSA Archer

IT Security Project Management

Infrastructure Security

Vulnerability Management

CISSP Certification

CCSK Certification

Tools

RSA Archer

Vulnerability Management Tools

Job description

Job Title: Cybersecurity Analyst

Spectra Tech is seeking a Cybersecurity Analyst in West Mifflin, PA.

Job Description

The Naval Nuclear Laboratory develops advanced naval nuclear propulsion technology to ensure the safety and reliability of our Navy's submarine and aircraft fleet. We are looking for a cybersecurity subcontractor professional to join our team. The subcontractor will be responsible for executing all aspects of the National Institute of Standards and Technology (NIST) directives to support the Risk Management Framework (RMF). This includes assisting information system owners with developing System Security Plans (SSPs) and Security Assessment Reports (SARs) using the RSA Archer application on the Naval Nuclear Propulsion Network (NNPP Net) to support information system authorization. Additionally, the subcontractor will assist in developing Plans of Action and Milestones (POA&Ms) and Risk-Based Decisions (RBDs) for deficiencies identified during the information system authorization process.

Required Knowledge, Skills, and Abilities

1. At least four years of experience in roles such as security control validator, security control assessor, Information System Security Officer (ISSO), or Information System Security Manager (ISSM).
2. At least two years supporting development of security authorization packages in accordance with NIST 800-37, 800-53, 800-53a.
3. At least two years of experience with the Federal Risk and Authorization Management Program (FedRAMP).
4. Security+ Certification.

Desired Knowledge, Skills, and Abilities

1. Experience with RSA Archer application.
2. At least two years working on IT security project teams.
3. At least one year managing IT projects.
4. Knowledge of IT infrastructure and services, including Data Centers, servers, networking, and cloud services.
5. Knowledge of security policies such as NIST SPs, STIGs, and DoD Cloud SRG.
6. Experience with infrastructure security, endpoint protection, and vulnerability management tools.
7. Experience authorizing information systems within classified DoE or DoD environments.
8. Familiarity with NIST 800-171.
9. CISSP certification.
10. CCSK certification.