Cybersecurity Analyst (IMC00855)

Innovative Management Concepts, Inc.; Honolulu (HI); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

401(k) with 3% employer match

Paid time off

Health insurance

AD&D & life insurance

Job summary

Innovative Management Concepts, Inc. (IMC) is seeking a Cybersecurity Analyst to support a government program in the Army Pacific network. The role requires active Security+ certification, 7+ years of cybersecurity experience with DoD policy knowledge, and U.S. Citizenship with TS/SCI eligibility day one.

The position is completely onsite in Honolulu, HI, and involves leading security operations, policy development, RMF, NIST, and collaboration with Army officers and officials.

Qualifications

• Active CompTIA Security+CE certification required at start date.
• 7+ years cybersecurity experience, preferably with the Army.
• 5+ years knowledge of DoD and Army cybersecurity policy.
• Strong interpersonal and relationship-building skills.
• Strong writing skills addressing senior leaders.
• Ability to evaluate data to identify problems and gaps.
• U.S. Citizenship is required pursuant to government contract.
• Current DoD TS/SCI clearance eligibility day one and prior to entry on duty.

Responsibilities

• Oversight of day-to-day security operations for cybersecurity tasks.
• Validate compliant security architecture against policies and standards.
• Review and draft policies for regulatory compliance.
• Cross-reference and validate physical, personnel, facility, and information systems.
• Manage information security risks and report findings to the Government.
• Maintain Authorities to Operate (ATO) in accordance with FISMA, RMF, and NIST.
• Support cybersecurity requirements during Army and Joint exercises.
• Represent the customer and CG in briefings on cybersecurity posture.
• Ensure Secure Technical Implementation Guidelines (STIG) are maintained monthly.
• Use eMASS to validate compliance with Army RMF 2.0.
• Review Plans of Action & Milestones (POA&M) for currency and mitigations.
• Support CORA assessment team during inspections.
• Assist CORA remediation planning, execution, and documentation.
• Evaluate personnel during inspections and train staff on corrective actions.

Skills

CompTIA Security+CE

Cybersecurity experience

DoD/Army policy knowledge

Interpersonal skills

Technical writing

Data analysis

US citizenship

DoD TS/SCI clearance eligibility

Job description

• Active CompTIA Security+CE certification
• Pursuant to a government contract, this specific position requires U.S. Citizenship
• Current DoD TS/SCI clearance eligibility day one and prior to entry on duty

Email Subject Line: Cybersecurity Analyst (IMC00855)

This position is responsible for all areas of IT cybersecurity and assisting a government program information systems security manager (P-ISSM) in managing the risk throughout the Army Pacific conglomerate of networks.

Work Location:Completely onsite in Honolulu, HI.

Basic Required Qualifications and Skills: Note: These are mandatory items that all candidates must have when submitting an application to IMC for this position. Please ensure that your submission addresses each of these requirement items. Candidates without these required elements will not be considered.

• At start date, must possess an active CompTIA Security+CE certification.
• 7+ years cybersecurity experience, preferably working directly with the Army.
• 5+ years of knowledge of DoD and Army cybersecurity policy.
• Strong interpersonal and relationship-building skills.
• Strong writing skills and experience addressing senior executive leaders and General Officers.
• Ability to evaluate data to quickly identify problems, issues, and gaps.
• Pursuant to a government contract, this specific position requires U.S. Citizenship.
• All applicants must have current DoD TS/SCI clearance eligibility day one and prior to entry on duty.

Desired Qualifications and Skills: It is desirable that the candidate have the following qualifications:

• Capable of conducting technical research on cybersecurity issues and products and producing a whitepaper for leadership review.
• Experience working within military service components and combatant command environments, with a strong understanding of command structures and operational environments.
• Knowledgeable working with the Mission Partner Environment (MPE).
• A relevant educational degree in one of the following fields: Computer Science, Information Systems, Information Technology, Cybersecurity, Statistics, Business Administration, Systems Engineering, Computation Science, Computer Engineering, Electrical Engineering, Data Analytics, Information Technology, Information Security and Assurance, Mathematics, Software Engineering, Systems Engineering, or Telecommunications.
• Experience with cloud cybersecurity.

Essential Duties and Responsibilities: This position will include, but is not limited to, the following tasks:

• Oversight and accountability of day-to-day security operations of cybersecurity tasks.
• Validate compliant security architecture through understanding and application of current policies, procedures, and standards to provide a layered approach to cybersecurity.
• Assist in the review and drafting of policies against applicable standards for regulatory compliance.
• Cross-reference and validate physical, personnel, facility, and information systems, through policies and controls IAW Army Regulations, Department of Defense (DoD) Directives and Instructions.
• Manage information security risks and report findings to the Government.
• Work with system owners to maintain current Authorities to Operate (ATO) in a manner compliant with the Federal Information Security Management Act (FISMA), DoD Risk Management Framework (RMF), and National Institute of Standards and Technology (NIST) guidance.
• Support cybersecurity requirements during Army and Joint exercises.
• Represent the customer and CG in briefings and meetings regarding the cybersecurity posture of the AOR.
• Ensure appropriate Secure Technical Implementation Guidelines (STIG) are maintained through monthly review.
• Use eMASS to validate compliance with Army RMF 2.0 standards.
• Review Plans of Action & Milestones (POA&M) for currency and mitigations to identify vulnerabilities.
• Support CORA assessment team during inspections.
• Assist with planning, execution, and documentation of CORA remediation activities.
• Evaluate personnel during inspections, document findings, and train staff on corrective actions and prevention strategies.

Salary and Benefits Information: Please see the salary information listed at the beginning of this document, which is not a guarantee of compensation or salary. All salaries will be based on relevant experience, geographic location, and position and/or contractual requirements, which could fall outside of the listed range.

Full-time positions at IMC are eligible to participate in any or all of the benefit programs offered, including 401(k) with a 3% employer match, paid time off, paid holidays, FSA spending, dental, vision, health insurance, company-sponsored AD&D,and life insurance.Additional voluntary benefits are offered,such as voluntary life, AD&D, accident, critical illness, hospital,and pet insurance.Benefits are subject to change. Positions at IMC may also be eligible for a bonus and/or other incentives.

Innovative Management Concepts, Inc. (IMC), a Service-Disabled Veteran-Owned Small Business, provides a broad range of information technology IT services to government and commercial customers by placing a high priority on modernization, enhancing business processes through technology, and creating efficiencies through automation. Since its founding in 1989, IMC has offered solutions and expertise in: IT operations and maintenance, data management, cyber security, systems and network engineering and administration, cloud/hosting services, software development, website services, software quality assurance and testing (including IV&V), and project management. IMC is certified in International Organization for Standardization (ISO) 9001 Quality Management, ISO 27001 Information Technology Security Management, ISO 20000 Information Technology Service Management, and ISO 14001 Environmental Management System. Committed to continuous improvement and information security, IMC has beenappraised at level 3 of the CMMI Institute’s Capability Maturity Model Integration for both Development and Services and we are CMMC Level 2 (Ver 2.0) compliant. Find out more about IMC at www.imcva.com .

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.