Information Assurance Analyst

• Perform analysis and evaluation to design, implement, test, and field secure systems, networks, and architectures
• Evaluate information systems security policies throughout all phases of the acquisition and information system lifecycle
• Conduct vulnerability scans, reports, asset creation/modification, and policy creation/modification using ACAS Security Center
• Collaborate with engineers to remediate identified vulnerabilities or develop mitigations
• Conduct certification and testing in accordance with the Risk Management Framework (RMF) and NIST policy
• Notify PORs, developers, and Subject Matter Experts of CYBERCOM IAV announcements
• Implement and apply DoD, DoN, CNSS, and NIST policy, instructions, and requirements
• Update technical publications including Technical Plans, Analyses and Reports, Risk Assessments, Cybersecurity Strategy, Test Plans, procedures and reports, System Security Plans, checklists, and SOPs
• Assist the Information Systems Security Engineering team in analyzing and evaluating the information security of Naval software systems
• Support RMF Assessment and Authorization services by conducting cybersecurity and risk assessments to identify and mitigate technical and non-technical vulnerabilities

• U.S. Citizenship
• Minimum Department of Defense (DoD) Secret level Security Clearance or ability to obtain an interim security clearance prior to hire date
• DoD 8140/8570 certification qualified as Information Assurance Technician (IAT) Level II, such as CompTIA Security+ CE or equivalent, or ability to obtain within 90 days of hire
• Knowledge of security engineering, design concepts, and principles
• Experience with modern networks, operating systems, databases, and virtual computing
• Cybersecurity awareness throughout development
• Experience identifying and resolving issues encountered during testing
• Ability to collaborate with systems, network, and software SMEs to gather information
• Ability to maintain data integrity and cyber compliance
• Strong customer relations, documentation, and oral communication skills
• Self-motivated, strong work ethic, and commitment to quality
• Passion for providing quality and technically sound solutions
• Ability to multitask and balance multiple goals and priorities
• Actively enrolled in an Information Assurance or Cybersecurity degree program at an accredited university or technical college
• Experience with general networking concepts (TCP/IP, OSPF, etc.) preferred
• Experience with Agile and Scrum preferred
• Industry certifications preferred

Demonstrates expertise in cybersecurity analysis, risk management, and secure system design, with a strong focus on compliance with DoD and NIST policies. Proficient in vulnerability assessment and remediation, with the ability to collaborate effectively with technical teams to ensure data integrity and security.

• Risk Management Framework (RMF)
• ACAS Security Center
• DoD 8140/8570 Certification
• CompTIA Security+ CE
• Cybersecurity Risk Assessment

• Security Engineering
• Vulnerability Scanning
• Network Security
• Operating Systems
• Database Management
• Technical Documentation
• Cyber Compliance
• Agile Methodology
• Scrum Framework
• TCP/IP Networking

• Strong Work Ethic
• Customer Relations
• Oral Communication
• Self-Motivated
• Multitasking

• DoD Secret Level Security Clearance
• Information Assurance Technician (IAT) Level II

• NIST Policy
• Cybersecurity Strategy
• Technical Plans
• Risk Assessments
• System Security Plans
• SOPs
• Cybersecurity Awareness
• Information Systems Security
• Naval Software Systems
• Asset Management