SME Information Security Analyst

Goldbelt Inc.; Oklahoma City (OK); On-site; USD 90,000 - 130,000; Full time

Job summary

Goldbelt Inc. is seeking an SME Information Security Analyst to strengthen our security framework for enterprise classified information systems.

You will ensure confidentiality, integrity, and availability, leveraging your expertise in SAP cybersecurity and risk management within a DoD-focused landscape. Responsibilities include maintaining SOPs and SSPs, performing DISA STIG-based security scans, and monitoring the IT environment for security events.

Qualifications

• Demonstrated ability to work in dynamic, DoD-focused environments.
• Experience defining, implementing and sustaining SAP cybersecurity practices.
• Familiarity with Air Force Instructions, JSIG-series regulations or equivalent.

Responsibilities

• Ensure confidentiality, integrity and availability of classified information systems and data.
• Provide cybersecurity support for diverse systems and applications.
• Develop and maintain SOPs, SSPs, and AO documentation; ensure required DoD documentation is current.
• Perform security scans using STIG guidelines to ensure compliance.
• Monitor IT environment for security events and assess configuration changes for impact on security posture.

Skills

SAP cybersecurity

Security clearance

Regulatory compliance

Education

Bachelor's degree

Job description

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.

A leader in cutting-edge research and technology in the cyber arena, CPMG focuses on using business drivers to guide cybersecurity activities and manage risk. CPMG offers flexible, integrative solutions for Department of Defense (DoD) contractors, among others, and specializes in cybersecurity, information and operational technology, electronic security surveillance, and support services.

Summary:

We are actively seeking a SME Information Security Analyst to strengthen our organization's security framework, specifically within the realm of enterprise classified information systems. You will play a critical role in ensuring the confidentiality, integrity, and availability of our organization's information systems. Your strong background in information security, a keen eye for detail, and a proactive approach to risk management will be pivotal.

Responsibilities

Essential Job Functions:

• Ensure the confidentiality, integrity and availability of classified Information Systems (IS) and data using Air Force approved network engineering practices, information security standards and approved industry best practices.


• Provide cybersecurity support for various systems to include standalone and networked systems.


• Evaluate approved new technologies prior to implementation within the organizational environment.


• Provide cybersecurity support for application development, planning, network implementation, systems integration, communication support, computer-communication maintenance, asset management and security controls.


• Produce, maintain and revise Standard Operating Procedures (SOP), System Security Plans (SSP) and maintaining Approval to Operate documentation. Ensure all DoW IS cybersecurity-related documentation is current and accessible to properly authorized individuals.


• Perform security scans using DISA Security Technical Implementation Guides (STIG) to ensure systems security settings and patch levels are compliant.


• Perform generation, collection and preservation of IS audit logs in accordance with the SSP and government customer requirements.


• Monitor and document system changes in accordance with the Configuration Management Policy and the SSP.


• Media Control management to include documentation and accountability of all media.


• Continuously monitor the IT and environment for security-relevant events, assess proposed configuration changes for potential impact to the cybersecurity posture, and assess the quality of security controls implementation against performance indicators.


• Provide information security support and auditing as defined in regulations, instructions, and policies applicable for both classified and unclassified systems as needed.


• Ensures the integration of cybersecurity into, and throughout the lifecycle of the IT, on behalf of the AO and in accordance with DoDI 8510.01.


• Continuously monitors the IT and environment for security-relevant events, assess proposed configuration changes for potential impact to the cybersecurity posture, and assess the quality of security controls implementation against performance indicators.


• Ensures cybersecurity-related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the AO and other affected parties, such as IOs and stewards and AOs of interconnected IT.

Qualifications

Necessary Skills and Knowledge:

• Demonstrated ability to work in dynamic environments and effectively interact with a wide range of DoD, military/civilian


• Must have verifiable expertise in defining, implementing and sustaining SAP cybersecurity practices and procedures for SAP facilities.


• Verifiable expertise in products and systems utilized by the SAP community and are familiar with the Air Force Instructions, JSIG-series regulations or equivalent.

Minimum Qualifications:

• Shall hold professional and approved U.S. Department of War Directive 8140.01 certifications related to information security as required and appropriate per the duty position (ex. CompTIA Security+).


• Minimum 3+ years of experience.


• Must have a TOP SECRET security clearance.

Preferred Qualifications:

• Bachelor’s degree in a related field.

Pay and Benefits

At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.