L or Q Cleared Cybersecurity Analyst

Spectra Tech, Inc.; West Mifflin (Allegheny County); On-site; USD 90,000 - 120,000; Full time

Job summary

Spectra Tech, Inc. supports the Naval Nuclear Laboratory and seeks a Cybersecurity subcontractor to execute RMF directives and assist in building SSPs and SARs for NNPP Net. The role includes contributing to POA&Ms and RBDs across DoD/DoE environments, with emphasis on RSA Archer usage.

The candidate should have DoD/DoE security experience, NIST RMF familiarity, and certifications such as Security+, CISSP or CCSK, with a clearance to start.

Qualifications

• Four+ years combined experience in security roles (validator/assessor/ISSO/ISSM).
• Two+ years developing authorization packages per NIST RMF (800-37/800-53/800-53a).
• Two+ years FedRAMP experience.
• Security+ certification.
• Experience with RSA Archer.
• Two+ years on IT security project teams.
• At least one year managing IT projects.
• Knowledge of IT infrastructure and services (data centers, servers, networks, cloud).
• Knowledge of security policies (NIST SPs, STIGs, DoD SRG).
• Knowledge of endpoint protection and vulnerability management tools.
• Experience authorizing information systems in classified DoE/DoD environments.
• Familiarity with NIST 800-171.
• CISSP and CCSK certifications.

Responsibilities

• Execute RMF directives per NIST guidance.
• Assist in developing System Security Plans (SSPs) and Security Assessment Reports (SARs).
• Support development of Plans of Action and Milestones (POA&Ms) and Risk Based Decisions (RBDs).
• Work with NNPP Net using RSA Archer.

Skills

Security role experience

ISSO/ISSM experience

Security control validation

Education

Security+ Certification

CISSP certification

CCSK certification

Tools

RSA Archer

FedRAMP knowledge

Job description

The Naval Nuclear Laboratory develops advanced naval nuclear propulsion technology for the safety and reliability of our Navy's submarine and aircraft fleet. Our company is looking for a Cybersecurity subcontractor professional to join our team. The subcontractor will be responsible for execution of all aspects of the National Institute of Standards and Technology (NIST) directives to support the Risk Management Framework (RMF). This includes assisting information system owners with development of System Security Plans (SSPs) and Security Assessment Reports (SARs) using the existing RSAArcher application on the Naval Nuclear Propulsion Network (NNPP Net) to support information system authorization. Additionally, the subcontractor will assist in the development of Plans of Action and Milestone (POA&Ms) and Risk Based Decisions (RBDs) for deficiencies found during the information system authorization process. Job Location is Bettis or Knolls.

• At least four years of combined experience in the following roles; security control validator, security control assessor, Information System Security Officer (ISSO), or Information System Security Manager (ISSM)
• At least two years of experience supporting development of information system security authorization packages in accordance with Risk Management Framework (NIST 800-37, 800-53, 800-53a)
• At least two years of experience working with Federal Risk and Authorization Management Program (FedRAMP)
• Security+ Certification

• Experience with the RSA Archer application
• At least two years of experience working on IT security project teams
• At least one year of experience managing IT projects
• Knowledge of IT infrastructure and services (Data Centers, physical and virtual servers, local and wide area networking components, cloud Infrastructure/Platform/Software as a Service, etc.)
• Knowledge of security policies such as NIST Special Publications, Security Technical Implementation Guides (STIGs), DOD Cloud Computing Security Resource Guide (SRG)
• Knowledge of infrastructure security, endpoint protection, vulnerability management tools
• Previous work authorizing information systems within a classified DoE or DoD environment
• Familiarity with NIST 800-171
• Certified Information Systems Security Professional (CISSP) certification
• Certificate of Cloud Security Knowledge (CCSK) certification

Must have a L or Q Clearance to start.