Information Security Analyst Job at Auria in Colorado Springs

Auria Space is seeking a Information Security Analyst to join our team in Colorado Springs, CO to support the Data Transport Product Support Sustainment Logistics Maintenance (DSLM) contract. The DSLM effort provides sustaining, maintaining, and logistics support for the operational capability to transfer data for the purpose of providing highly reliable and secure telemetry, tracking, command, control, and communications. DSLM primarily supports the Satellite Control Network (SCN).

Position Summary

Designs, tests, and implements state-of-the-art secure operating systems, networks, and database products. Leads risk assessments and provides recommendations for application design. Leads cybersecurity initiatives including architectures, firewalls, electronic data traffic, and network access. Provides guidance on encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research. May support security report preparation for delivery to regulatory agencies.

Duties & Responsibilities (to include but not limited to):

• Maintain multiple RMF packages and performing risk assessments across mission systems supporting the Data Transport and Receive Network (DTRN) (e.g., SCN, SCN Test Lab, Orbital Analysis Subsystem).
• Serve as a cybersecurity expert leading and tasking Junior and Journeymen Information Security Analyst in effective RMF execution.
• Develops and implement an Anti-virus/Malware identification process for checking in/out of SCN equipment from/to SCN sites.
• Coordinates with Software Maintenance Action (SWMA) IA patching team and with the program office IA architecture team on an IA/Cybersecurity Roadmap to identify non-compliant IA controls and propose corrective actions.
• In coordination with the Government, employ system security engineering to design, develop and implement secure applications and configurations. In preparation of acquiring mission hardware for all IA-impacting projects/efforts, evaluate the COTS and GOTS, when available, hardware, firmware, and software information security components.
• Organize annual cybersecurity control validation within eMASS IAW DoDI 8510.01 and DoDI 8500.01.
• Attends Technical Interchange Meetings at key project phases (Requirements, Design, etc.) to obtain cybersecurity community buy off.
• Participates in the development and implementation of policies, procedures and standards related to information security, privacy and incident response, and monitors compliance to these policies and programs.
• Provides technical engineering services management for the support of integrated security systems and solutions.
• Uses tools and processes to monitor information systems for security-related events.
• Assesses cybersecurity configuration changes for major security infrastructure platforms.
• Helps maintain a library of security audit tools, and corresponding processes that can be used for system security testing, internal audits, incident response, and diagnosis of security-related system issues.
• Travel to CONUS and OCONUS locations may be required (up to 20%).

Minimum Qualifications:

• BS Degree in related field plus 5 years of related experience or equivalent combination of education / experience
• ·Active DoD Secret Security Clearance required or the ability to obtain and maintain one
• Qualified candidates will have demonstrated the following traits: technically competent, strong data analysis skills, solid decision making, critical thinking, strong customer focus, self-motivated, desire to learn, effective and professional interpersonal skills, pride in work, strong team player, and hardworking.

Preferred Qualifications:

• DoD 8140 Cyber Defense Analyst or Vulnerability Analyst Intermediate Qualification or certification (e.g., CISSO, CySA+, GPEN, CISA, or technical BS from an ABET accredited or CAE designated institution [as defined in DoD 8140])
• Experience with VM, DMZ, Firewall configuration / auditing, networking or performing cyber assessments on network devices
• SCN and/or DoD experience
• Cybersecurity Tool experience (e.g., eMASS, ACAS, ESS, SIEM, STIGs)
• Flexibility and willingness to take on unanticipated tasks is highly desirable.

Salary Range: The salary offered will be based on the selected candidate’s qualifications - skills, education & experience - and the position level ($86,000- $113,000).

About Auria

Auria is a provider of solutions and software in support of complex Space, National Security, and Cyber missions of federal, international, and commercial customers. Headquartered in Colorado Springs, CO and with operations in Boulder, CO, Washington, DC, Huntsville, AL, Albuquerque, NM, Ogden, UT, and San Diego, CA, our success is built on the excellence of diverse teams advancing innovative systems and operational software to strengthen our customers’ superiority in Space. With a distinguished track record and a spirit of relentless pursuit, we set the pace for progress and execute every mission with the utmost precision.

When you join Auria as a full-time employee, you get many benefits which include:

• Generous PTO package with yearly tenure increases
• Flex time policy providing you the flexibility needed
• 11 Company-Paid Holidays per year
• Up to 4% match on 401(k) employee contributions, employer and employee contributions immediately vested
• Tuition and Certification Fee Assistance
• Low-cost medical plans that include company-sponsored HSA
• No-cost life insurance
• Employee Assistance Program (EAP)
• And much more!

Auria is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action-Employer, making decisions without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, marital status, national origin, age, veteran status, disability, or any other protected class.