Information Systems Security Analyst (ISSA)

Zantech; Reston (VA); Vor Ort; USD 85.000 - 110.000; Vollzeit

Zusammenfassung

Zantech, a Woman Owned Small Business, seeks an Information Systems Security Analyst (ISSA) to support the Air National Guard Decision Support System (ANGDSS) under the AWTCSS contract in Reston, VA. Responsibilities include RMF inspections, maintaining security programs, ensuring compliance with STIGs and guidelines, and coordinating with the ANG Readiness Center on eMASS tasks.

Requirements: US citizenship, ability to obtain a Secret clearance, IAT II or IAM II DoD cyber baseline, and a

Qualifikationen

• 1+ years of experience on ATOs for government systems.
• Experience with RMF and NIST publications (NIST 800-53, NIST 800-37).
• Excellent writing and verbal communication skills.

Aufgaben

• Conduct RMF inspections, tests, and reviews to ensure ANGDSS maintains an ATO.
• Maintain information security program artifacts and policies.
• Ensure security configurations comply with STIGs/guidance and report changes to the AO.

Kenntnisse

RMF process

NIST 800-53

NIST 800-37

POA&M management

Writing & communication

Ausbildung

Bachelor’s Degree

Equivalent work experience

Tools

eMASS

Security controls

Configuration management

Jobbeschreibung

Are you looking for your next challenge? Are you ready to work with a performance-based small company? At Zantech, we are a dynamic Woman Owned Small Business focused on providing complex, mission-focused solutions with a proven track record of outstanding customer performance and high employee satisfaction. We would love to talk with you regarding the next step in your career.

Zantech is in search of an Information Systems Security Analyst (ISSA) to support the Air National Guard Decision Support System (ANGDSS) as part of the Air National Guard Web Tools and Cloud Support Services (AWTCSS) Contract.

The ISSA will perform the following functions:

• Conduct information system security inspections, tests, and reviews of the Risk Management Framework (RMF) Information Assurance Package to ensure ANG DSS maintains an Authority to Operate (ATO). Update artifacts and information within the Enterprise Mission Assurance Support Service (eMASS) to validate Security Controls and Assessments. Develop Plan of Actions and Milestones (POAMs) for non-compliant items.
• Maintain a formal information system security program, including systems security plans, cyber security policies, security control assessments, contingency plans, configuration management plans, incident response plans, plan of actions and milestones, risk management plans, vulnerability scanning, and/or vulnerability management plans.
• Ensures software, hardware, and firmware comply with appropriate security configuration guidelines (e.g., security technical implementation guides /security requirement guides).
• Ensures cybersecurity-related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the Authorizing Official (AO) and other affected parties, such as Information Owners (IOs) and stewards and AOs of interconnected IT.
• Coordinates with the Air National Guard Readiness Center’s Risk Management Framework lead on eMASS related tasks.

Required Experience or Knowledge of the following technologies/functions:

• 1+ Years of experience working on ATOs for government systems
• Ability to manage the Plan of Actions & Milestones (POA&M) documents associated with Information Systems.

• Demonstrated on-the-job knowledge and experience of the Risk Management Framework (RMF) process and the National Institute of Standards and Technology (NIST) publications (specifically NIST 800-53 and NIST 800-37), including development and maintenance of associated certification and accreditation documentation.

• Excellent writing, verbal communication, and time-management skills.

Required Education/Certifications:

• Education Required:
  • None
• Education Preferred:

• • Bachelor’s Degree in Information Systems, Information Assurance Management, Computer Science, or related field.
  • (May be substituted for relevant work experience)
• Certifications Required:

• • IAT Level II or IAM Level II DoD approved cybersecurity baseline certification, or higher.

Required Security Clearance:

• US Citizenship and the ability to obtain and maintain an active Secret or higher clearance, per contract requirements.

Outstanding Performance…Always!

Our corporate motto represents our commitment to build long-term relationships with both our clients and our employees by providing the highest quality service in everything we do. We strive for excellence for our clients and for each other. We embrace the opportunity to hire individuals with new talents and fresh perspectives. Zantech offers competitive compensation, strong benefits, and a vacation package, as well as a fast-paced and exciting work environment.