- 16-Aug-2018 to Until Filled (EST)
- Suffolk, VA, USA
- Full Time
- Secret
Title: Cyber Security Compliance Analyst
Location: Suffolk, VA
Clearance: Secret
Responsibilities:
- Provide Information Systems Security Authorization support to DHS/USCG facilities
- Perform System Security Authorization and related IA Continuous Monitoring tasks across multiple customer owned and managed systems
- Work closely with internal and external cyber security stakeholders within CGCYBERCOM, USCGHQ and DHS in maintaining continued FISMA compliance, sustained ATO and effective system security posture
- Conduct security evaluations and assessments
- Perform documentation support services
- Provide Cyber Security operations support services to the Command, Control & Communications Engineering Center
Requirements:
- Associate's degree in Information Systems, Engineering, or related technical field; educational requirements may be substituted with IA/IT security work experience
- Familiarity with DHS, USCG and other federal cyber security policies and guidelines including DHS MD-4300A, USCG COMDTINST 5500.13, DOD 8500.1, and related FIPS and NIST Special Publications
- Knowledge of NIST and DOD IA documentation such as NIST 800.53, NIST 800-37, and RMF
- Experience in the analysis of system weaknesses identified during system security assessments and the related mitigation plans
- Experience in the use of the IACS (XACTA), ACAS, EMASS and HBSS security tools; working knowledge of the Open System Interconnect (OSI) model
- Experience in the creation and of management of required FISMA documents and deliverables
- Working knowledge of RMF and experience in the creation of C&A packages and deliverables
- Experience in the analysis of IAVA bulletins and Cyber Security TASKORDs and providing leadership details on any required actions and related timelines
- Experience in tracking weakness mitigation/patch status and working with system stakeholders in the creation and management of mitigation of POAM's and associated deliverables
- Experience in the analysis of system security and vulnerability assessment results and creation of mitigation plans
- Certifications: must have CAP, CASP, CISM or CISSP
- DOD Secret clearance required
Equal Opportunity Employer/Veterans/Disabled
