Cybersecurity Analyst (3959)

Navarro Research and Engineering; West Milton (NY); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health Care Plan (Medical, Dental &amp

Retirement Plan (401k)

Life Insurance (Basic, Voluntary &

Paid Time Off (Vacation & Public

Short Term & Long-Term Disability

Job summary

Navarro Research and Engineering is seeking a Cybersecurity Analyst to support RMF processes for DoE/DoD environments in West Mifflin, PA or West Milton, NY. An active DOE clearance or DOD equivalent is required.

You will develop SSPs and SARs using RSA Archer on the NNPP Net, assist in POA&Ms and RBDs, and coordinate with information system owners to ensure certification and authorization. Candidates should have experience in security control validation/assessment, FedRAMP, and CISSP/CCSK

Qualifications

• At least four years of combined experience in security control validation, security control assessment, ISSO or ISSM.
• At least two years of experience supporting development of information system security authorization packages per RMF (NIST 800-37, 800-53, 800-53a).
• At least two years of experience working with FedRAMP.
• Security+ Certification.

Responsibilities

• Execute all aspects of the RMF to support information system authorization.
• Assist in development of SSPs and SARs using RSA Archer on NNPP Net.
• Develop Plans of Action and Milestones (POA&Ms) and Risk Based Decisions (RBDs) for deficiencies.
• Coordinate with information system owners to ensure compliance for DoE/DoD environments.

Skills

Security control validation

Security control assessment

ISSO/ISSM experience

NIST RMF 800-37/53

FedRAMP knowledge

RSA Archer

CISSP

CCSK

NIST 800-171

Tools

RSA Archer

Job description

Navarro Research and Engineering is recruiting a Cybersecurity Analyst in West Mifflin, PA or West Milton, NY. An active DOE clearance or DOD equivalent is required to be considered for this opportunity.

Navarro is an award-winning provider of turnkey solutions, delivering comprehensive nuclear, environmental and technical services to federal agencies, commercial enterprises and private clients across the United States. Our expertise supports organizations such as the Department of Energy, the National Nuclear Security Administration, the Department of Defense and NASA, while also extending to commercial industries and private sector partners facing complex engineering, technical and environmental challenges. Navarro specializes in nuclear operations, environmental remediation, D&D, waste management, advanced energy, facilities management and technical and professional services. For more information, please visit Navarro-inc.com.

The Naval Nuclear Laboratory develops advanced naval nuclear propulsion technology for the safety and reliability of our Navy's submarine and aircraft fleet. Our company is looking for a Cybersecurity subcontractor professional to join our team. The subcontractor will be responsible for execution of all aspects of the National Institute of Standards and Technology (NIST) directives to support the Risk Management Framework (RMF). This includes assisting information system owners with development of System Security Plans (SSPs) and Security Assessment Reports (SARs) using the existing RSAArcher application on the Naval Nuclear Propulsion Network (NNPP Net) to support information system authorization. Additionally, the subcontractor will assist in the development of Plans of Action and Milestone (POA&Ms) and Risk Based Decisions (RBDs) for deficiencies found during the information system authorization process. Job Location is Bettis or Knolls.

Requirements

• At least four years of combined experience in the following roles; security control validator, security control assessor, Information System Security Officer (ISSO), or Information System Security Manager (ISSM)
• At least two years of experience supporting development of information system security authorization packages in accordance with Risk Management Framework (NIST 800-37, 800-53, 800-53a)
• At least two years of experience working with Federal Risk and Authorization Management Program (FedRAMP)
• Security+ Certification

Desired Knowledge, Skills, and Abilities

• Experience with the RSA Archer application
• At least two years of experience working on IT security project teams
• At least one year of experience managing IT projects
• Knowledge of IT infrastructure and services (Data Centers, physical and virtual servers, local and wide area networking components, cloud Infrastructure/Platform/Software as a Service, etc.)
• Knowledge of security policies such as NIST Special Publications, Security Technical Implementation Guides (STIGs), DOD Cloud Computing Security Resource Guide (SRG)
• Knowledge of infrastructure security, endpoint protection, vulnerability management tools
• Previous work authorizing information systems within a classified DoE or DoD environment
• Familiarity with NIST 800-171
• Certified Information Systems Security Professional (CISSP) certification
• Certificate of Cloud Security Knowledge (CCSK) certification

Due to the nature of the government contract requirements and/or clearances requirements, US citizenship is required.

Navarro is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, religion, color, national origin, age, disability, veteran's status, or any classification protected by applicable state or local law.

EEO Employer/Vet/Disabled

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation & Public Holidays)
• Short Term & Long-Term Disability