Information Assurance Security Analyst - Mid

SMS Data Products Group, Inc.; San Antonio (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

SMS Data Products Group, Inc. seeks an Information Assurance Security Analyst for the Cryptologic and Cyber Division (CCSD) at Lackland AFB in San Antonio, TX. You will perform incident response, ensure DoD and AF security policy compliance, and support RMF/IA across classified and unclassified environments.

You will develop SOPs, assist with RMF artifacts, and coordinate with government agencies. Requires DoD Top Secret/SCI eligibility and RMF/STIG expertise.

Qualifications

• Three to five years of IT security consulting on government contracts.
• Experience creating RMF packages demonstrating RMF controls.

Responsibilities

• Perform Computer Security Incident Response activities for a large organization and coordinate with other government agencies.
• Ensure CCSD networked systems comply with AFI 17-101 and RMF lifecycle requirements.
• Analyze complex network and IA systems in unclassified and classified environments for RMF compliance.
• Write SOPs, COOP, configurations, and other RMF documentation.
• Provide technical evaluation of proposed systems and approaches.
• Validate Information Assurance (IA) Controls.
• Assist Government with IA, Security, EMSEC inspections.
• Assist with destruction of classified media.

Skills

RMF knowledge

NIST SP 800-37

STIG analysis

DoD guidance

RMF artifacts prep

MS Office

Strong communication

Independent work

Education

CompTIA Security+CE

Tools

eMASS

STIG tools

Job description

SMS has an immediate opening for Information Assurance Security Analyst on our Cryptologic and Cyber Division (CCSD) Security team at our Lackland Air Force Base site in San Antonio, TX. Our team supports the CCSD by ensuring communications are secure and protected against Cyber threats while provide continuous access for authorized users.

In this role, you will:

Perform cybersecurity incident response and ensure compliance with DoD, Air Force, and local security policies across classified and unclassified environments.

Since 1976, SMS has specialized in modernizing legacy IT and sustaining complex enterprise environments for federal agencies. With the goal of building long-term partnerships with our customers, we invest in our employees by providing the training, tools, and support they need to keep critical missions operational, improve performance, and reduce risk. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com.

Job Responsibilities

• Perform Computer Security Incident Response activities for a large organization; coordinates with other government agencies to record and report incidents in accordance with DoD, Air Force, and Local Operating Policies and Instructions.
• Ensure that CCSD networked systems, RDT&E, and standalone systems and programs comply with AFI 17-101 and appropriate local Operating Instructions. which provides life-cycle management for Information Assurance (IA) and other critical systems.
• Analyze complex network and IA systems in unclassified and classified environments for compliance with DoD and industry best practices security configuration requirements.
• Write Standard Operation Procedures (SOP), COOP, Configurations, and other documentation in support of RMF as required.
• Provide technical evaluation of proposed system(s) and application approaches.
• Validate Information Assurance (IA) Controls.
• Assist the Government with various IA, Security, EMSEC and other inspections.
• Assist with the destruction of classified media.

Required Qualifications

• Three to five years of progressively responsible IT security consulting experience on government contracts
• Must have eMASS experience
• Must have experience creating RMF packages that demonstrate compliance with RMF controls
• Must have strong understanding of NIST SP 800-37 (RMF for IT Systems)
• Must have demonstrated STIG analysis experience (candidate need to be able to interpret them, assess systems for compliance, and document findings in the ATO packages) and knowledge of STIG tools
• Individual must have high degree of skills with the MS Office toolsets.
• Knowledge and experience in the certification and accreditation processes that require knowledge of DoD Guidance (DoDD 8500.1, DoDI 8500.2, 8520, AR 25-2), DITSCAP, RMF, Air Force Best Business Practices (BBP) and information assurance and auditing.
• Knowledge and experience in C&A workflow in accordance with RMF requirements, preparation of system-related RMF artifacts, system security engineering, preparation of security test plans and their execution, remediation of system vulnerabilities, and preparation of IA documentation including PPS matrix, POA&M and system security plans.
• Candidate must possess refined critical thinking skills, should be a self-starter, may direct the activities of other team members, diplomatic, multi-task capable, adaptive to a dynamic environment, dependable and reliable.
• Strong verbal and written communication skills as well as the ability to work independently as required.

Certifications Required

• CompTIA Security+CE

Clearance Required

• Active DoD Top Secret/SCI is required.

Desired Qualifications

• RMF Rev5 migration experience.

SMS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.