Cybersecurity Analyst – DoD RMF & Flight Test Security

Trinzic; Beavercreek (OH); On-site; USD 90,000 - 110,000; Full time

Benefits offered by this job

401k plan with company match

Medical, dental, vision

Life insurance

AD&D

Flexible spending account

Paid time off

Flexible work schedule

Job summary

KBR is seeking a Cybersecurity Analyst to support the Air Force Research Laboratory’s Autonomous Air Refueling project. The role entails implementing and maintaining security controls per RMF, NIST 800-53/171, and DoD policy, and coordinating with system administrators and authorizing officials.

Location is on-site at WPAFB, OH with travel under 15%. Candidates should have a BS in a related field and 3+ years of experience, plus active Secret clearance; Security+ and Network+ are preferred.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or information technology or equivalent experience.
• 3+ years’ experience in a related field.
• Experience in developing Plan of Action and Milestones (POA&M).
• Knowledge of independent verification and validation techniques is required.
• Experience working independently and as part of a team in researching data, developing analytical techniques and methodologies is required.
• CompTIA Security+, CompTIA Network+.
• Active Secret clearance

Responsibilities

• Works with CRONUS ISSM to ensure systems are properly configured, patched, monitored, and documented.
• Implements security governance, Cybersecurity coordination, planning and implementation.
• Supports the ISSM for all program Cyber-related Flight Test authorizations; reviews Flight Test Plans, attends required meetings.
• Manage security artifacts such as the Security Classification Guide (SCG), Communications Plan, Science and Technology Protection Plan (S&TPP), POA&M and incident reports.
• Execute review of security CDRL Deliverables i.e. OPSEC Plan, Security Plan, Research & Related Annual Report
• Coordinates and assesses implementation of controls and POA&M timelines for compliance.
• Enforces CUI handling, develop and updates program DD254 as needed, program visit requests, and access controls.
• Supports the hands-on testing activities with Air Refueling Battle Management, Air Refueling Mission Computer, Software in the Loop/Hardware in the Loop configuration and cyber implementation, flight tests, digital tools integrations, and hands-on testing activities.
• Implement and coordinate overarching program level plans, policies and procedures: i.e. Continuous Monitoring and execution.
• Establishes strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems. This includes process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
• Assists in the implementation of the required government policy (i.e., JSIG, NISPOM, SP-800-171, SP-800-53, RMF) for site-hosted information systems and makes recommendations on process tailoring.
• Performs extensive analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Periodically conducts a review of each system's audits and monitors corrective actions until all actions are closed.

Skills

POA&M development

RMF & NIST controls

Independent verification & validation

Analytical research skills

Team collaboration

Education

Bachelor’s degree in computer science, cybersecurity, or information technology

Tools

CompTIA Security+

CompTIA Network+

Job description

KBR is seeking a Cybersecurity Analyst to support the Air Force Research Laboratory’s Autonomous Air Refueling project. The role entails implementing and maintaining security controls per RMF, NIST 800-53/171, and DoD policy, and coordinating with system administrators and authorizing officials.

Location is on-site at WPAFB, OH with travel under 15%. Candidates should have a BS in a related field and 3+ years of experience, plus active Secret clearance; Security+ and Network+ are preferred.