Information Security Analyst Principal

Cybersecurity Jobs; Pearl City (HI); On-site; USD 108,000 - 140,000; Full time

Job summary

Cybersecurity Jobs in Pearl Harbor, HI, is seeking a senior information security professional to support the US BICES-X program. Responsibilities include RMF authorization, audits, vulnerability management, and risk mitigation for DoW classified environments.

Applicants should have 5+ years of experience, a BA/BS, and a Top Secret/SCI clearance. The role requires collaboration with government staff and multiple agencies in a onsite Pearl Harbor setting.

Qualifications

• 5+ years of experience in cybersecurity/risk management
• BA/BS or equivalent combination of education or experience
• IAM Level II Certification (CISSP, CASP, CISM, GSLC, CCIS)
• Must possess and maintain Top Secret/SCI clearance
• Ability to work in a team-oriented environment
• Familiarity with network concepts, user authentication, and digital signatures
• Understanding of DoW RMF (800-53 Rev 4 and Rev 5)
• Understanding of DoW policies and procedures (FIPS 199, FIPS 200, NIST 800-53)

Responsibilities

• Perform IA and RMF activities for DoW classified environments
• Coordinate with government staff and agencies to audit policies and procedures
• Conduct vulnerability audits using STIGs, ACAS, and DISA SCAP for Linux/Windows
• Create and track POA&Ms; propose remediation actions
• Brief senior stakeholders on security posture and risk decisions
• Maintain DoW RMF processes and security documentation
• Coordinate with OUSDI, USAF, DISA, USN for audits and inspections
• Evaluate firewall change requests and assess risk
• Communicate alerts on intrusions and compromises to agencies
• Provide guidance to junior staff and stay current with technologies
• Participate in special projects as required

Skills

Teamwork

DoW RMF understanding

Network concepts familiarity

Education

BA/BS or equivalent

Tools

STIGs

ACAS

DISA SCAP

Linux

Windows

Job description

Support the US BICES-X program by performing principal-level information security, audit, and RMF authorization and risk activities for DoW classified environments.

Responsibilities

• Perform Cybersecurity activities (IA, Information Assurance) for a large program; coordinate with government program staff, USAF, and other government agencies to assist with creation, dissemination, direction, and auditing of program policy, standards, and operating procedures
• Use available resources to execute cybersecurity work and brief senior GDIT and government stakeholders on overall program security posture
• Conduct network and system vulnerability audits using STIGs, ACAS, and DISA SCAP to mitigate findings for Linux, Windows, and related network operating systems
• Create, track, and review Plan of Action and Milestones (POA&Ms); identify solutions to support remediation and resolution
• Communicate tactical and strategic threat information to Government leaders, Cybersecurity-Ops, and A&A staff to support cyber risk decisions and threat mitigation
• Carry out DoW Risk Management Framework (RMF) per DoW 8510 using security control validation activities and coordinating security testing to determine information system security posture
• Maintain Security Authorization status, including system documentation for multiple DoW classified networks and interconnected systems
• Coordinate with OUSDI, USAF, DISA, USN, and other organizations to support audits and inspections; provide required documentation for SAVs, ST&Es, and CCRI
• Evaluate firewall change requests and assess organizational risk
• Perform Security Impact Analysis based on organizational requirements
• Communicate alerts to agencies regarding intrusions and compromises affecting network infrastructure, applications, and operating systems
• Assist in implementation of counter-measures and/or mitigating controls
• Ensure integrity and protection of networks, systems, and applications by technically enforcing organizational security policies and monitoring vulnerability scanning devices
• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and integrity scans for compliance
• Provide guidance and work leadership to less-experienced technical staff
• Maintain current knowledge of relevant assigned technologies
• Participate in special projects as required

Requirements

• 5+ years of experience
• BA/BS or equivalent combination of education, technical training, or work/military experience
• IAM Level II Certification (CISSP, CASP, CISM, GSLC, or CCIS)
• Must possess and maintain Top Secret/SCI Security Clearance
• Additional specific certifications may be required depending on assignment
• Ability to work in a team-oriented, collaborative environment
• Familiarity with network concepts, user authentication, and digital signatures
• Understanding of DoW RMF (800-53 Rev 4 and Rev 5)
• Understanding of DoW policies and procedures, including FIPS 199, FIPS 200, NIST 800-53, and other applicable policies

Technologies

• STIGs
• ACAS vulnerability scanner
• DISA SCAP
• Linux
• Windows

Clearance

• Top Secret/SCI

Job Details

• Location: Pearl Harbor, Hawaii (onsite)
• Category: Cyber and IT Risk Management
• Requisition #: RQ228396
• Requisition type: Regular
• Travel required: None
• Public trust: None
• Citizenship: U.S. Citizenship Required
• Years of experience: 5+ years (may vary based on technical training, certification(s), or degree)
• Salary range: $107,744 - $140,300 (likely)

Identity Verification Process

• Expected to be on camera during virtual interviews
• Right to take your picture to verify identity and prevent fraud
• Authorization to collect, process, and use biometric data for identity verification and security purposes