Cybersecurity Analyst​/Information Systems Security Officer; IS Security Clearance

Position: Cybersecurity Analyst / Information Systems Security Officer (IS with Security Clearance
Title:

Cybersecurity Analyst / Information Systems Security Officer (ISSO) Belong. Connect. Grow. with K ! K 's National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country's most critical role - protecting our national security. Why Join Us?

* Innovative Projects: K 's work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.

* Collaborative Environment:
Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.

* Impactful Work:
Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.

Job Title:

Cybersecurity Analyst / Information Systems Security Officer (ISSO)

Job Summary:

K  is seeking a Cybersecurity Analyst / Information Systems Security Officer (ISSO) to join our team at Peterson SFB in Colorado Springs, CO. An active TS/SCI clearance is required. The individual will work in close coordination with current team members to ensure systems are operated, maintained, and disposed of in accordance with applicable security policies and procedures. Duties may include but are not limited to:
* Perform activities to convert accreditation packages from DoDRMF Rev. 4 to Rev. 5

* Compiling and tracking vulnerabilities and mitigation results in quantifying program effectiveness, creating and maintaining vulnerability management policies, procedures and training

* Apply security policies to meet security objectives of the system

* Apply updates, patches, and security technical implementation while maintaining control system performance and availability requirements

* Establish and maintain security configuration baseline for the control system(s), including IT components, interconnections, and interfaces
* Implement Risk Management Framework (RMF) Assessment requirements for control systems, and document/maintain records for them

* Maintain knowledge of the function and security of control system and IT technologies with which the control systems interface

* Perform asset management and maintain inventory of control system devices and components through physical inspection or logical scans

* Support risk assessments by reviewing and documenting the implementation status of security requirements of control systems

* Mitigate/correct security deficiencies identified during security/certification testing and/or recommend risk acceptance for the appropriate senior leader or authorized representative

* Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials)

* Reviewing and defining requirements for information security solutions, controls compliance and policy development

* Organizing network-based scans to identify possible network security attacks and host-based scans to identify vulnerabilities in workstations, servers and other network hosts determining critical security flaws and figuring out how to fix them

* Conduct audits and assessments focused on uncover vulnerabilities in the networks through scanning tools

* Assist in improving and automating existing vulnerability management lifecycle including but not limited to data ingestion & normalization, compliance metrics and detections on assets

* Assist in partnering with tools and technology teams to troubleshoot, develop, select, implement, and automate appropriate security solutions to keep system data protected from internal and external threats

* Assist in providing support and resolution for scanning and vulnerability remediation reporting issues

* Assist in working to effectively communicate the risks of identified vulnerabilities and make recommendations regarding the selection of cost-effective security controls to mitigate identified risks.

* Stay current with vulnerability information across all the products in the AVAC environment

* Work as part of an integrated team to develop and maintain RMF body of evidence documentation using Enterprise Mission Assurance Support Service (eMASS), XACTA or equivalent products

* Maintain repositories of all body of evidence documentation for systems under your purview

* Develop and execute security control assessment procedures to verify conformance with control requirements as part of ongoing continuous monitoring and authorization assessment activities

* Ensure all security-related vulnerabilities and deficiencies are documented in the Plan of Action and Milestones (POA&M) for each system

* Ensure configuration management policies and procedures for authorizing use of hardware/software are followed and coordinate any system baseline changes with the appropriate…