Cyber Security Analyst

Maritime Cybersecurity Analyst

This position requires an active Public Trust clearance or the ability to obtain a Public Trust clearance to be considered.

Applicant MUST have prior US Navy or Coastguard Maritime Cyber Security Experience.

The Senior Maritime Cybersecurity Analyst provides expert cybersecurity support to the MARAD Information Assurance Program, supporting system authorization, continuous monitoring, and Authority to Operate (ATO) activities for maritime information systems. This role works closely with MARAD program offices, Information System Owners, and ISSMs to manage security documentation, assess risk, support compliance with federal and maritime cybersecurity requirements, and strengthen the security posture of IT and OT systems supporting maritime operations.

Estimated Starting Salary Range for Maritime Cybersecurity Analyst: $150,000 - $155,000.

Pay commensurate with experience.

Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

• Provide support to the MARAD Information Assurance Program for operations, business and administrative in support of the System Authorization Process and deliverables as defined in this document. Direct involvement with MARAD Program Office and the Information System Security Manager during cybersecurity and Authority to Operate (ATO) matters related to information systems supporting the MARAD CIO. Background on Network Architecture, hardware, software, contingency planning and disaster recovery required.
  
  Maritime background desired. Analyst will provide support for 3-4 systems depending on system level (Low, Moderate or High) and the current state of compliance of each system’s ATO.
• Manage MARAD’s Information System’s core documentation, in accordance with each phase of the system engineering process / System Development Life Cycle (SDLC) with standardized templates, baseline management with supporting checklists and technical guides, including but not limited to the DOT Security Authorization and Continuous Monitoring Guide, Weakness Guide and other Core Documents. Provide information system data for Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), and System of Record Notices (SORNs).
  
  Interface with the System Owner (SO) to ensure the PIA/PTA/SORN contains appropriate information to be approved and adjudicated by the DOT Privacy Office for inclusion in the System Authorization package.
• Support creation/updating of FIPS 199 Security Categorization documents; ensure information type(s) and special considerations (if applicable) are defined.
• Support creation/updating of security control selection listings (include justification for applicable tailor and or risk acceptance).
• Support creation/updating of System Security Plans (SSP); ensure discovered and identified system components, control implementation status are addressed.
• Support creation/updating of Information System Configuration Management Plans.
• Support creation/updating of Information System Account Management Plans.
• Support creation/updating of Audit Log Monitoring Plans. Develop and maintain inventory of information system interconnections and review, develop/update Interconnection Security Agreements and MOUs in accordance with NIST 800-47.
• Support creation/updating of Risk Assessments and relevant impact ratings within the scope of this statement of work.
• Assist the Information System Owner (ISO), Business Sponsor, and Information System Security Manager (ISSM) in recording all known security weaknesses of assigned information systems in the Plans of Action and Milestones (POA&M) in accordance with DOT policy, guides and procedures.
• Develop Draft Plan of Action and Milestones (POA&M) for observed control level deficiencies or gaps in implementation of controls in accordance with DOT policy, guides and procedures.
• Support the information system contingency planning process in accordance with NIST SP 800-34 Revision (Current), Guide to Test, Training and Exercise Programs for MARAD information and ensure contingency plan test…