Technology Security Associates
Cyber Security Analyst
Technology Security Associates, Patuxent River, Maryland, United States, 20670
JHNA Technology Security is seeking a Cyber Security Analyst to serve as an Information System Security Engineer (ISSE) for the support of tasking that involves the analysis of the posture of systems in support of system certification and accreditation.
Duties/Responsibilities:
Work with Information System Security Officer (ISSO) and Information System Security Manager (ISSM) to develop technical solutions to problems, implement enhancements and upgrade system architectures.Implement Categorization for Security Control selection.Create, maintain, and update required Risk Management Framework (RMF) artifacts for ATO packages.Define system security requirements, assess system security architecture designs, and support the development and sustainment of the RMF authorization package throughout all lifecycle phases.Update and assess hardware, software, policies, and processes for compliance of system ATO packages.Review and update Plan of Action and Milestones (POA&Ms) as part of the Continuous Monitoring process.Perform required security testing as part of the RMF Assess & Authorize process to include, but not limited to, running SCAP or Evaluate-STIG, completing DISA Security Technical Implementation Guides (STIGs), and running ACAS scans.Accurately review vulnerability scan and STIG Checklist results and update as needed.Attend meetings requiring cyber support as necessary.Communicate cybersecurity and operations issues to ISSO/ISSM.Qualifications Required:
Ability to obtain security clearance - interim required to start working.Associate degree and two (2) years of experience OR HS Diploma and five (5) years of experience.Security+ CE or equivalent DoD approved 8140 baseline certifications.Working knowledge of PowerShellHelpdesk experience and basic troubleshooting skillsWillingness to progress to more advanced problem solving.Proficiency with Windows 10 and LinuxAbility to communicate effectively.Experience with creating/maintaining documentation.Organizational skillsQualifications Desired:
Experience with NAVAIR RMF ProcessDISA STIG experienceACAS/Nessus experienceExperience with eMASS, VRAM, DITPR/DADMSDemonstrated experience implementing project management principles and managing, tracking, and coordinating a wide range of actions, documents, and tasks through completion.Proficient in Microsoft (MS) Office applications (e.g. Word, Excel, PowerPoint, and Project)Excellent oral and written communications skills. Good interpersonal communications skills
Duties/Responsibilities:
Work with Information System Security Officer (ISSO) and Information System Security Manager (ISSM) to develop technical solutions to problems, implement enhancements and upgrade system architectures.Implement Categorization for Security Control selection.Create, maintain, and update required Risk Management Framework (RMF) artifacts for ATO packages.Define system security requirements, assess system security architecture designs, and support the development and sustainment of the RMF authorization package throughout all lifecycle phases.Update and assess hardware, software, policies, and processes for compliance of system ATO packages.Review and update Plan of Action and Milestones (POA&Ms) as part of the Continuous Monitoring process.Perform required security testing as part of the RMF Assess & Authorize process to include, but not limited to, running SCAP or Evaluate-STIG, completing DISA Security Technical Implementation Guides (STIGs), and running ACAS scans.Accurately review vulnerability scan and STIG Checklist results and update as needed.Attend meetings requiring cyber support as necessary.Communicate cybersecurity and operations issues to ISSO/ISSM.Qualifications Required:
Ability to obtain security clearance - interim required to start working.Associate degree and two (2) years of experience OR HS Diploma and five (5) years of experience.Security+ CE or equivalent DoD approved 8140 baseline certifications.Working knowledge of PowerShellHelpdesk experience and basic troubleshooting skillsWillingness to progress to more advanced problem solving.Proficiency with Windows 10 and LinuxAbility to communicate effectively.Experience with creating/maintaining documentation.Organizational skillsQualifications Desired:
Experience with NAVAIR RMF ProcessDISA STIG experienceACAS/Nessus experienceExperience with eMASS, VRAM, DITPR/DADMSDemonstrated experience implementing project management principles and managing, tracking, and coordinating a wide range of actions, documents, and tasks through completion.Proficient in Microsoft (MS) Office applications (e.g. Word, Excel, PowerPoint, and Project)Excellent oral and written communications skills. Good interpersonal communications skills