Senior Information Security Analyst

New Directions Technologies Inc.; Ridgecrest (CA); On-site; USD 90,000 - 130,000; Full time

Job summary

New Directions Technologies Inc. in Ridgecrest, CA, seeks a security engineer to support DoD systems, RMF processes, eMASS oversight, and vulnerability remediation on-site. U.S. citizenship and the ability to obtain and maintain a DoD security clearance are required.

You will review STIGs, manage eMASS packages, coordinate with system administrators, and produce RMF artifacts, risk assessments, and continuous monitoring deliverables to maintain ongoing authorization.

Qualifications

• U.S. Citizenship is required.
• Must be able to obtain and maintain a DoD Security Clearance.
• BS in Computer Science or related field with 10+ yrs of work experience or AS with 15+ yrs of work experience.
• IAM III certificate.

Responsibilities

• Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information.
• Execute RMF process steps following Navy/NAVAIR directives.
• Review Nessus scans and maintain hardware/software lists.
• Collaborate with System Administrators and Network Operations to address vulnerabilities and ensure security controls are implemented.
• Conduct security control assessments and document RMF artifacts and risk mitigations.
• Support continuous monitoring programs and contingency planning as needed.
• Assist in incident response activities and provide program status updates.

Skills

Security clearance

RMF process

eMASS

STIG Viewer

SCAP Compliance Checker

Navy/NAVAIR directives

Vulnerability assessment

Education

BS in Computer Science/related field

AS with 15+ years experience

Tools

eMASS

STIG Viewer

SCAP Compliance Checker (SCC)

VRAM

Visio

Job description

This position requires a DoD Security Clearance, U.S Citizenship and the ability to work onsite (remote/telework is not an option) - no exceptions.

Job Description

• Planning, implementing, upgrading, or monitoring security measures for the protection of computer networks and information.
• Applicant should possess a strong understanding of the RMF process, as well as a eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio applications.
• Execute all RMF process steps following the guidelines outlined in Navy and NAVAIR directives.
• Managing packages in eMass.
• Reviewing Nessus scans.
• Maintaining hardware/software lists.
• Ensure the Reviewing and verifying STIGs are complete.
• Collaborate with System Administrators, Network Operations, etc. to address system vulnerabilities, track progress and ensure security measures are implemented effectively.
• Conduct security control assessments and validations of a system's technical and non-technical security features to mitigate known threats and vulnerabilities effectively. These assessments should comprehensively identify and assess impacts while also taking into account existing risk mitigation strategies.
• Ensure the completion of all necessary RMF products and reporting in accordance with policy and in collaboration with the Security Control Assessor.
• Assist in updating any documentation related to risk assessments (such as Risk Assessment Reports, Plan of Actions & Milestones, etc.) based on the results of assessments.
• Conduct the necessary vulnerability analysis to facilitate the mitigation and determination of residual risk as required.
• Provide support for the continuous monitoring program as needed, especially when System Level Continuous Monitoring results are essential to meet ongoing authorization requirements.
• Assist in contingency planning, testing, and execution as necessary.
• Support the incident response process and actively participate in meetings with the program team, offering updates on project status.

Experience/Education

• Due to the sensitive nature of the work, U.S Citizenship is required.
• Must be able to obtain and/or maintain a Security Clearance for duration of employment.
• BS - Computer Science or other technical field with 10 yrs work experience OR AS with 15 yrs work experience.
• IAM III certificate.

NDTI is an SDVOSB and is proud to be an Equal Opportunity Employer. At NDTI we value taking care of our employees and delighting our customers.