Cyber Security Analyst (2728)

$85,000 - $160,000/Yr

Navarro - West Mifflin, PA

Full-time - Mid Level

West Mifflin, PA

Food Services and Drinking Places

About the position

The Cyber Security Analyst position at Navarro Research and Engineering involves supporting the execution of NIST directives to enhance cybersecurity measures within the Naval Nuclear Laboratory. The role focuses on developing System Security Plans (SSPs) and Security Assessment Reports (SARs) while ensuring compliance with the Risk Management Framework (RMF). The analyst will work closely with information system owners and contribute to the overall security posture of the organization.

Responsibilities

• Assist information system owners with the development of System Security Plans (SSPs) and Security Assessment Reports (SARs).
• Support the Risk Management Framework (RMF) directives as per NIST guidelines.
• Develop Plans of Action and Milestones (POA&Ms) and Risk Based Decisions (RBDs) for deficiencies found during the information system authorization process.
• Utilize the RSA Archer application on the Naval Nuclear Propulsion Network (NNPP Net) for information system authorization.
• Collaborate with IT security project teams to ensure effective security measures are implemented.

Requirements

• An active DOE Q or DoD Top Secret clearance.
• At least four years of combined experience in roles such as security control validator, security control assessor, Information System Security Officer (ISSO), or Information System Security Manager (ISSM).
• At least two years of experience supporting the development of information system security authorization packages in accordance with Risk Management Framework (NIST 800-37, 800-53, 800-53a).
• At least two years of experience working with Federal Risk and Authorization Management Program (FedRAMP).
• Security+ Certification.
• Experience with the RSA Archer application.
• At least two years of experience working on IT security project teams.
• At least one year of experience managing IT projects.
• Knowledge of IT infrastructure and services including Data Centers, physical and virtual servers, and cloud services.
• Knowledge of security policies such as NIST Special Publications and Security Technical Implementation Guides (STIGs).
• Familiarity with NIST 800-171.
• Certified Information Systems Security Professional (CISSP) certification.
• Certificate of Cloud Security Knowledge (CCSK) certification.

Nice-to-haves

• Previous work authorizing information systems within a classified DoE or DoD environment.
• Knowledge of infrastructure security and endpoint protection tools.

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Short Term & Long-Term Disability