Information Security Analyst

Overview

We are Vista Innovative Solutions, LLC (VIS), an Alaska-backed government contracting and consulting company supporting several military installations and federal agencies across the nation.

The Information Security Analyst interacts with the Cyber Security Team and contractor personnel to ensure all contract-related RMF requirements are fulfilled and submitted in eMASS. Prepares packages/risk assessments for accreditation, reaccreditation and self-assess processes of RMF, to include but not limited to providing artifacts, documentation, and eMASS input. Provides direction to ensure RMF is managed within Army management/oversight to accurate depiction of the systems or products.

• Establishes and ensures that appropriate security controls over software and hardware are maintained at all times. Analyzes software and hardware requirements. Patches devices in accordance with IAVAs and reports on compliance.
• Develops, manages and communicates organizational security policies and standards to protect company systems and assets. Researches emerging threats and recommends software and hardware solutions and procedures that neutralize those threats.
• Designs, establishes and executes company security strategy.
• Documents, reviews, maintains and edits security best practices and policies.
• Communicates and collaborates with IT team to maintain equipment and optimize security of system architecture.

The following duties are not intended to serve as a comprehensive list of all duties performed by all employees in this classification. Shown are duties intended to provide a representative summary of the major duties and responsibilities. Incumbent(s) may not be required to perform all duties listed and may be required to perform additional, position-specific duties.

• Prepares packages/risk assessments for accreditation, reaccreditation and self-assess processes of RMF, to include but not limited to providing artifacts, documentation, and eMASS input.
• Provides direction to ensure RMF is managed within Army management/oversight to accurate depiction of the systems or products.
• Establishes and ensures that appropriate security controls over software and hardware are maintained at all times. Analyzes software and hardware requirements. Patches devices in accordance with IAVAs and reports on compliance.
• Develops, manages and communicates organizational security policies and standards to protect company systems and assets.
• Participates in strategic planning for the deployment of information security technologies and program enhancements in the supported environment.
• Works and communicates with government and contractor personnel on RMF requirements.
• Conducts and facilitates inquiries into all security issues and incidents involving RMF and reports findings and recommendations.
• Identifies and evaluates complex technology risks and remediation methods to mitigate risks.
• Assesses and evaluates network vulnerabilities. Reviews and analyzes network traffic, configurations, and operating procedures and provides recommendations to improve system security posture.
• Performs other duties as assigned or required.

• Thorough knowledge of network systems design, development, testing, installation, operating, management, documenting, and maintenance concepts to provide and protect network services.
• Extensive knowledge of information technology methods and information protection techniques and procedures. This includes hardware, software, and operating systems; systems configuration and integration; maintenance, upgrades, and modifications; network operations functions, mapping and documenting architecture, firewalls, packet switching communications protocols, and diagnostic tools to analyze difficult and complex system problems and provide resolutions.
• At least 3 years of security-related information technologies experience with at least 1 year networking with ports and protocols, with an understanding of securing ICS environments. Other experience (including any of the following but not limited to):
  Internet of Things (IOT) security, network administration, network security, server…