Information Security Analyst

SANMINA-SCI TECHNOLOGY INDIA PRIVATE LIMITED; Huntsville (AL); On-site; USD 95,000 - 140,000; Full time

Job summary

SANMINA-SCI TECHNOLOGY INDIA PRIVATE LIMITED is seeking an Information System Security Officer (ISSO) / System Administrator to lead cybersecurity compliance and RMF implementation for DoD-related systems. The role focuses on accreditation, continuous monitoring, risk management, and providing hands-on system administration for desktop and standalone environments.

You will develop SSPs, load controls into eMASS, conduct weekly audits with Splunk, and manage vulnerability scanning with Nessus.

Qualifications

• Active DoD Secret clearance.
• Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• 3+ years of ISSO or cybersecurity compliance experience.
• Experience with DoD or DCSA accreditation processes and SSP development.
• Strong RMF knowledge and eMASS experience.
• Current CompTIA Security+ certification.

Responsibilities

• Develop, maintain, and update System Security Plans (SSPs) and authorization artifacts for standalone and networked systems.
• Ensure RMF security controls are properly implemented, validated, and loaded into eMASS.
• Perform weekly security audits and log reviews using Splunk Enterprise or native monitoring tools; execute corrective actions.
• Conduct vulnerability scanning and management using Tenable Nessus; coordinate patching and remediation strategies.
• Apply, enforce, and verify STIGs across operating systems and applications.
• Create, track, and manage Plans of Action and Milestones (POA&Ms) through resolution.
• Perform system administration functions: user accounts, access controls on standalone computers.
• Provide tier 2/3 technical support and disaster recovery tasks.
• Configure and administer Group Policy Objects to enforce security configurations.
• Schedule backups and VM environment maintenance.

Skills

RMF framework & risk management

POA&Ms tracking

DoD/ DCSA accreditation processes

Vulnerability assessment

Active DoD Secret clearance

System hardening & STIGs

3+ years ISSO experience

Education

Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science

Tools

Nessus / Security Center

Splunk Enterprise

eMASS

Group Policy Objects (GPOs)

Windows desktop administration

Job description

Requisition ID: 113593-0

Information System Security Officer (ISSO) / System Administrator

Job Purpose

The Information System Security Officer (ISSO) / System Administrator serves as the primary cybersecurity and compliance lead for the organization, ensuring systems adhere to Risk Management Framework (RMF) and Defense Counterintelligence and Security Agency (DCSA) security requirements. This role is primarily focused on strategic cybersecurity alignment, system accreditation, continuous monitoring, and risk management, while also providing operational system administration support and maintenance for desktop and standalone computing environments.

Key Responsibilities

Cybersecurity & Compliance (Primary)

• Develop, maintain, and update System Security Plans (SSPs) and associated authorization artifacts for standalone and networked systems.
• Ensure RMF security controls are properly implemented, validated, and loaded into the Enterprise Mission Assurance Support Service (eMASS).
• Perform weekly security audits and log reviews using Splunk Enterprise or native monitoring tools as required by DCSA; execute corrective actions as needed.
• Conduct vulnerability scanning and management using Tenable Nessus, coordinating patching and remediation strategies.
• Apply, enforce, and verify Security Technical Implementation Guides (STIGs) across operating systems and applications.
• Create, track, and manage Plans of Action and Milestones (POA&Ms) through resolution.

System Administration & Operations (Secondary)

• Perform system administration functions, including user account management and access controls on standalone computers.
• Provide tier 2/3 technical support, computer setup, hardware/software troubleshooting, and root-cause resolution.
• Configure and administer Group Policy Objects (GPOs) to enforce security configurations and user policies.
• Execute regular system backups, disaster recovery tests, and routine operating system updates.
• Assist in maintaining virtual machine (VM) environments.

Qualifications & Requirements

Clearance: Active DoD Secret clearance.

Education: Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent work experience).

Experience

• 3+ years of dedicated experience acting as an ISSO or in a direct cybersecurity compliance role.
• Demonstrated experience with DoD or DCSA accreditation processes and SSP development.
• Deep understanding and hands-on experience with the Risk Management Framework (RMF) and eMASS.

• Proficiency in tracking and resolving POA&Ms.

Certification: Current CompTIA Security+ (or equivalent DoD 8140/8570 IAT II / IAM I baseline certification).

Core Technical Skills

• Experience using Nessus / Security Center for vulnerability scanning.
• Working knowledge of audit log review platforms like Splunk Enterprise.
• Working knowledge of Windows desktop administration, Group Policies, and standalone computer environment.

Preferred Qualifications

Hands-on experience performing dual ISSO and System Administrator duties in a classified or sensitive environment.

Current Windows Operating System certification.

Experience with virtual machine configuration and backup management platforms.