Information Security Analyst

PROSOFT; Portsmouth (VA); On-site; USD 95,000 - 130,000; Full time

Job summary

PROSOFT is seeking an Information Security Analyst to support DoD RMF processes across Navy networks and systems. The role requires active Top Secret clearance and expertise in vulnerability assessment, risk analysis, and contingency planning.

Responsibilities include applying cybersecurity concepts, performing vulnerability analysis, and coordinating Security Test & Evaluation efforts, with day-to-day VRAM activities and baseline uploads.

Qualifications

• Minimum four (4) years of CS analysis experience in cyber metrics, incident response and mitigation.
• Experience with DoD/OPNAV guidance and cybersecurity requirements.

Responsibilities

• Support RMF process across network and system assets.
• Perform vulnerability analysis and risk mitigation.
• Assist in Security Test & Evaluation (ST&E).
• Maintain VRAM activities and upload baseline vulnerability scans.

Skills

RMF processes

Vulnerability analysis

Cybersecurity concepts

CS risk assessment

Education

Bachelor's degree in IT

Security+ or higher

Tools

ACAS

HBSS

MDE/MDI

Splunk

Job description

Position: Information Security Analyst

Location: Norfolk Naval Shipyard, on-site

Active Top Secret Clearance is required

The Information Security Analyst shall work to support the cybersecurity posture by performing the DoW Risk Management Framework (RMF) process across Network and System assets. They will be responsible to:

• Apply Cybersecurity / INFOSEC concepts and requirements.
• Perform System / Network vulnerability analysis.
• Perform Risk assessment and risk mitigation analysis.
• Support Security Test and Evaluation (ST&E).
• Participate in contingency planning, Firewall Policies, and Ports and Protocols checks.
• Maintain all day-to-day Vulnerability Remediation Asset Management (VRAM) activities.
• Enter the system baseline configuration in VRAM by uploading vulnerability scan of a representative baseline system.

Qualifications:

• Minimum of four (4) years of experience in CS analysis in support of Cyber metrics analysis, incident response and mitigation; risk mitigation analysis, developing contingency plans. KSAs include:
• Experience with Cyber applications, [e.g., ACAS, HBSS, MDE, MDI, Splunk]
• Expert and Mastery levels with institutional knowledge and a minimum of 4 years’ experience, on the mission critical procedures, systems, and processes, as they pertain to Information Technology and Cyber Security requirements.
• Expert knowledge of and experience with CS requirements as defined by Public Laws, National, DoD, and DON guidance [e.g., Federal Information Security Management Act (FISMA), DoDD 8100.02, DODI 8500.01, DoDI 8520, DoDI 8530, DoDI 8531, SECNAV 5239 Series and OPNAV 5239 Series, NIST Special Publications Series 800, etc.]
• Expert knowledge and experience with the requirements outlined in OPNAVINST N9210.3 Safeguarding Naval Nuclear Propulsion Information.

Education:

• Bachelor’s degree in an IT related discipline OR Level II Certification (Security+ or higher) AND a minimum of four (4) years of experience.

Certifications:

• Active Security+ CE or higher