Cybersecurity Analyst (ISSO) | Req#4668

ActioNet, Inc.; Silver Spring, Northern (MD, KY); Hybrid; USD 90,000 - 140,000; Full time

Job summary

ActioNet in Silver Spring, MD is seeking a Cyber Security Analyst with a Public Trust clearance for a hybrid role (on-site 1-2 days per week). You will provide senior IA/CS support, perform RMF/A&A activities, and help ensure ATO accreditation.

The role requires firewall, STIG, and vulnerability management knowledge, experience with Tenable/BigFix, CSAM/eMASS, and strong writing skills to prepare assessment reports.

Qualifications

• IA/INFOSEC concepts and RMF/A&A familiarity.
• Tenable and BigFix familiarity preferred.
• Experience with CSAM or eMASS.
• Knowledge of STIG requirements and implementation.
• Experience with Windows and Linux operating systems.
• Strong oral and technical writing skills.
• Knowledge of US Government IA processes.

Responsibilities

• Conduct system security plan assessments to ensure security controls meet requirements.
• Perform comprehensive assessments of security controls and overall effectiveness.
• Ensure security configurations meet requirements and document procedures.
• Support RMF risk management by assigning risk impact ratings and POA&Ms.
• Provide assessment reports detailing weaknesses and recommended corrective actions.

Skills

IA/INFOSEC concepts

Firewall policy & ports

Vulnerability analysis

RMF A&A process

Tenable & BigFix familiarity

CSAM or eMASS experience

STIGs knowledge

Windows & Linux knowledge

Technical writing

US Government IA processes

Education

Bachelor's degree or AA/AS in Information Assurance or InfoSec

Tools

Tenable

BigFix

CSAM

eMASS

ACAS

SCAP

Qualys

Rapid7 InsightVM

Job description

ActioNet has an immediate opportunity for a Cyber Security Analyst requiring a Public Trust clearancelocated in Silver Spring, MD (THIS IS A HYBRID ROLE, on-site 1-2 days a week). ActioNet is an IT service provider and solutions integrator supporting federal government programs for 25+ years.

Salary up to 140,000

Provides senior technical analysis for Information Assurance (IA)/Cyber Security (CS) support efforts. Performs in-depth analysis in various areas and technologies withinNIST Risk Management Framework(RMF)Assessment & Authorization (A&A) process. Implements RMF systems to achieve Authority to Operate (ATO) accreditation.

• Conduct security assessments of system security plans to help ensure that plans provide security controls for information systems that meet stated security requirements.
• Conduct comprehensive assessments of the management, operational, and technical security controls employed within or inherited by an information system to determine the overall effectiveness of the controls.
• Ensure compliance of security configurations for IT systems and aid in providing clear and concise processes and procedures for the implementation and enforcement of system security configurations.
• Support the risk management process by helping to determine and assign risk impact ratings in accordance with Information Assurance standards guidelines and methodologies and by aiding in the development and maintenance of Plans of Action and Milestones (POA&Ms) for IT systems identified in the Risk Management Framework (RMF) process and annual security assessments of IT systems.
• Provide assessments of the severity of weaknesses or deficiencies discovered in the information system and its environment of operation and recommend corrective actions to address identified vulnerabilities and prepare the security assessment reports containing the results and findings from system security assessments.

Basic Qualifications:

• Demonstrated knowledge and experience of IA / INFOSEC concepts and requirements:Firewall Policy,Ports & Protocols, Cybersecurity, Cybersafe
• Familiarity with Tenable and BigFix, preferred.
• Experience with CSAM or eMASS
• Knowledge of the A&A process and standards - RMF
• System / network vulnerability analysis
• Risk assessment and risk mitigation analysis
• Knowledge and experience of the Defense Information Systems Agency published Security Technical Information Guidance (STIG) requirements and implementation/compliance process.
• Knowledge of virtualization, networking, Windows and Linux Operating Systems, and storage and backup.
• Possess strong oral and technical writing skills.
• Possess extensive knowledge of the US Government Information Assurance Security Processes.

Required Certifications:

IAT Level II or one of the following ( CISSP, CCSP, CISM, SecurityX)

Preferred Certifications:

• ITIL v4
• Qualys Certified Specialist
• Rapid7 InsightVM Certification
• ACAS Administrator
• SCAP Compliance Checker Training

Education:

• Bachelor's degree or AA/AS in Information Assurance or InfoSec field and 4 years of experience

ActioNet is a CMMI-DEV Level 4, CMMI-SVC Level 4, ISO 20000, ISO 27001, ISO 9001, HDI-certified, woman-owned IT Solutions Provider with strong qualifications and expertise in Agile Software Engineering, Cloud Solutions, Cyber Security and IT Managed Services. With 24+ years of stellar past performance, ActioNet is the premier Trusted Innogrator!

• We are committed to give back to ourCommunity , help others and make the world a better place for our next generation

ActioNet is proud to be named as a Top Workplace for the tenth year in a row (2014 - 2023). We have 98% of Customer retention rate. We are passionate about the inspirational missions of our customers and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health and well-being of our nation.

What's in It For You?

As an ActioNeter, you get to be part of exceptional team and a corporate culture that nurtures mutual success for our customers, employees and our communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy and a desire to develop your skills, experience and career.

Are you ready to make a difference?

ActioNet is an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

ActioNet Core Value #1 - Instill Integrity In Everything We Do