Information Security Analyst Principal

Support the US BICES-X program by performing principal-level information security, audit, and RMF authorization and risk activities for DoW classified environments.

• Perform Cybersecurity activities (IA, Information Assurance) for a large program; coordinate with government program staff, USAF, and other government agencies to assist with creation, dissemination, direction, and auditing of program policy, standards, and operating procedures
• Use available resources to execute cybersecurity work and brief senior GDIT and government stakeholders on overall program security posture
• Conduct network and system vulnerability audits using STIGs
  , ACAS
  , and DISA SCAP to mitigate findings for Linux
  , Windows
  , and related network operating systems
• Create, track, and review Plan of Action and Milestones (POA&Ms); identify solutions to support remediation and resolution
• Communicate tactical and strategic threat information to Government leaders, Cybersecurity-Ops, and A&A staff to support cyber risk decisions and threat mitigation
• Carry out DoW Risk Management Framework (RMF) per DoW 8510 using security control validation activities and coordinating security testing to determine information system security posture
• Maintain Security Authorization status, including system documentation for multiple DoW classified networks and interconnected systems
• Coordinate with OUSDI
  , USAF
  , DISA
  , USN
  , and other organizations to support audits and inspections; provide required documentation for SAVs
  , ST&Es
  , and CCRI
• Evaluate firewall change requests and assess organizational risk
• Perform Security Impact Analysis based on organizational requirements
• Communicate alerts to agencies regarding intrusions and compromises affecting network infrastructure, applications, and operating systems
• Assist in implementation of counter-measures and/or mitigating controls
• Ensure integrity and protection of networks, systems, and applications by technically enforcing organizational security policies and monitoring vulnerability scanning devices
• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and integrity scans for compliance
• Provide guidance and work leadership to less-experienced technical staff
• Maintain current knowledge of relevant assigned technologies
• Participate in special projects as required

• 5+ years of experience
• BA/BS or equivalent combination of education, technical training, or work/military experience
• IAM Level II Certification (CISSP, CASP, CISM, GSLC, or CCIS)
• Must possess and maintain Top Secret/SCI Security Clearance
• Additional specific certifications may be required depending on assignment
• Ability to work in a team-oriented, collaborative environment
• Familiarity with network concepts
  , user authentication
  , and digital signatures
• Understanding of DoW RMF (800-53 Rev 4 and Rev
  5)
• Understanding of DoW policies and procedures
  , including FIPS 199
  , FIPS 200
  , NIST 800-53
  , and other applicable policies

• STIGs
• ACAS vulnerability scanner
• DISA SCAP
• Linux
• Windows

• Top Secret/SCI

• Location: Pearl Harbor, Hawaii (onsite)
• Category: Cyber and IT Risk Management
• Requisition #: RQ228396
• Requisition type: Regular
• Travel required: None
• Public trust: None
• Citizenship: U.S. Citizenship Required
• Years of experience: 5+ years (may vary based on technical training, certification(s), or degree)
• Salary range: $107,744 - $140,300 (likely)

• Expected to be on camera during virtual interviews
• Right to take your picture to verify identity and prevent fraud
• Authorization to collect, process, and use biometric data for identity verification and security purposes