Job description
Job ID: 2303490
Location: HUNTSVILLE, AL, US
Date Posted: 2023-03-13
Category: Cyber
Subcategory: Cybersecurity Spec
Schedule: Full-time
Shift: Day Job
Travel: Yes, 25 % of the Time
Minimum Clearance Required: Interim Secret
Clearance Level Must Be Able to Obtain: Top Secret
Potential for Remote Work: No
Description
SAIC has an opportunity for a Senior Cybersecurity Analyst documenting security controls and creating Authority to Operate (ATO) packages. The scope of work for the position includes principal-level Cybersecurity leadership supporting INDOPACOM J73, Advanced Prototyping Engineering and Experimentation (APEX) Lab, and the Integrated Collaborative Environment (ICE).
NOTE: This position is located on Redstone Arsenal Alabama, but can require up to 25% travel to Hawaii. This position is a hybrid position that allows work from home for unclassified work and on site for classified work. The position supports a flex work schedule with every other Friday off.
Job Description:
- Documenting security controls in SSP per NIST SP 800-53A rev4
- Create Authority to Operate (ATO) packages
- Validate vulnerability/risk assessment analysis to support accreditation
- Utilize various information system inspection tools to audit systems, analyze potential vulnerabilities and identify mitigation approaches
- Conduct technical evaluation of information system designs, focusing on information security aspects and accreditation
- Review completion and implementation of system additions and enhancements, and makes recommendations to management
- Determine system specifications, input/output processes, and working parameters for hardware and software compatibility
- Assist and review program documentation to include RMF reports, accreditation packages, and security policy guides using NIST 800-53A guidance
Qualifications
Required Education:
Bachelors and five (5) years or more experience; Masters and three (3) years or more experience; PhD and zero (0) years related experience; four (4) years of related experience considered in lieu of degree.
Required Qualification:
- Experience using Government, Risk Compliance (GRC) tools (i.e. Cyber Security Assessment and Management (CSAM), eMASS, XACTA, ect)
- Experience developing Standard Operating Procedures (SOP), After-Action Reports, and Policy and Procedure documents
- Experience documenting security controls in a System Security Plan (SSP) and how the controls are being implemented
- Experience working with Authority to Operate (ATO) packages for both on-premises, and Cloud environments
- Familiar with Risk Management Framework (RMF), Cloud Security Requirements Guide (SRG), National Institute of Standards and Technology (NIST) guides, and Security Technical Implementation Guide (STIG)
- Understanding of the DOD requirements for the Network Topology, System Security Boundary, and Data Flow Diagrams
Required Certification
- Must have a current DoD IAM Level III certification (i.e. CISM, CISSP, GSLC, etc)
Required Clearance:
- Must be able to obtain a full Secret Clearance; Interim Secret required prior to start, SAIC will help to obtain
- Must be a current US Citizen
Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.
johnandkristie.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, johnandkristie.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, johnandkristie.com is the ideal place to find your next job.