Cyber and Information Systems Security Analyst/ISSO

The Johns Hopkins University Applied Physics Laboratory - Laurel, MD

Full-time - Entry Level

Laurel, MD

501-1,000 employees

Professional, Scientific, and Technical Services

About the position

As a Cyber and Information Systems Security Analyst/ISSO at the Johns Hopkins University Applied Physics Laboratory (APL), you will be integral to the design and operation of national security systems. This role involves collaborating closely with Information Systems Security Managers (ISSMs), Program Managers, System Administrators, and Program Security Representatives (PSRs) to develop secure IT solutions tailored for classified environments. Your expertise will contribute to the creation and refinement of essential documentation, including the System Security Plan (SSP), Plan of Action and Milestones (POA&M), Risk Assessment Report (RAR), Security Traceability Matrix (SCTM), and Concept of Operations (CONOPs). You will be responsible for capturing and refining program requirements to ensure effective implementation within the information systems. Conducting audits and analyzing reports for anomalous activities, such as unauthorized access and unapproved hardware/software, will be a key part of your duties. You will provide detailed reports and recommend actions following preliminary reviews of security events. Additionally, you will participate in configuration management activities, conducting security impact analyses and due diligence reports for security-relevant changes. This position is not only about technical skills but also about being part of a diverse and hardworking team of cybersecurity specialists who are passionate about supporting our Sponsor's mission needs. APL is recognized as one of Computerworld's Top Places to Work in IT for five consecutive years, highlighting our commitment to fostering a vibrant and innovative work environment.

Responsibilities

• Work closely with ISSMs, Program Managers, System Administrators, and PSRs to develop secure IT solutions for classified environments.
• Provide input into documentation such as the System Security Plan (SSP), Plan of Action and Milestones (POA&M), Risk Assessment Report (RAR), Security Traceability Matrix (SCTM), and Concept of Operations (CONOPs).
• Capture and refine program requirements for effective implementation within information systems.
• Conduct audits and analyze reports for anomalous activity, providing reports and recommending actions after preliminary reviews of security events.
• Participate in configuration management activities by conducting security impact analysis and due diligence reports for security relevant changes.

Requirements

• Possess a bachelor's degree or equivalent experience in Computer Science, Information Technology, or Cybersecurity related field.
• Experience working with government sponsors through inspections and assessments.
• Strong working knowledge of NISPOM, JSIG, ICDs, RMF, and other policy requirements.
• Skilled in crafting ATO packages using tools such as XACTA, LatteArt, ServiceNow, eMASS, or traditional methods.
• Minimum of 2 years' experience solving information technology problems in a classified facility.
• Detailed understanding of computer operating systems, hardware, software, and security procedures.
• Excellent organizational and communication skills with the ability to effectively interact with managers and technical staff.
• Possess a current DoD 8570 certification (Security+, CISSP, etc.), or ability to obtain within 6 months of employment required.
• Hold an active TS/SCI+ FullScope Poly security clearance.

Nice-to-haves

• Experience working in or directly supporting the Department of Defense, the IC Community or other U.S. government entities.
• Linux, virtualization, High Performance Compute (HPC) experience.
• Excellent verbal and written communication skills with an understanding of customer focus.

Benefits

• Generous benefits including a robust education assistance program.
• Unparalleled retirement contributions.
• Healthy work/life balance.