Cyber Security Analyst

$110,000 - $195,000/Yr

Gem Technologies - West Mifflin, PA

Full-time - Senior

West Mifflin, PA

251-500 employees

Merchant Wholesalers, Durable Goods

About the position

We are seeking a Cyber Security Analyst to join our team supporting the Naval Nuclear Laboratory (NNL) at their Kesselring and Bettis sites. This full-time position will be based out of West Mifflin, PA or Schenectady, NY with hybrid flexibility (25% remote). The Analyst will be responsible for executing all aspects of the National Institute of Standards and Technology (NIST) directives to support the Risk Management Framework (RMF), including assisting information system owners with the development of System Security Plans (SSPs) and Security Assessment Reports (SARs).

Responsibilities

• Assist information system owners with the development of System Security Plans (SSPs) and Security Assessment Reports (SARs).
• Support the Risk Management Framework (RMF) directives as per NIST standards.
• Develop Plans of Action and Milestone (POA&Ms) and Risk Based Decisions (RBDs) for deficiencies found during the information system authorization process.
• Utilize the RSA Archer application on the Naval Nuclear Propulsion Network (NNPP Net) to support information system authorization.

Requirements

• Bachelor's Degree in a relevant field and 5-10+ years of relevant experience.
• Active or very recently active DOE 'Q' Clearance or DoD 'Top Secret' Clearance.
• At least four years of combined experience in roles such as security control validator, security control assessor, Information System Security Officer (ISSO), or Information System Security Manager (ISSM).
• At least two years of experience supporting development of information system security authorization packages in accordance with Risk Management Framework (NIST 800-37, 800-53, 800-53a).
• At least two years of experience working with Federal Risk and Authorization Management Program (FedRAMP).

Nice-to-haves

• Experience with the RSA Archer application.
• At least two years of experience working on IT security project teams.
• At least one year of experience managing IT projects.
• Knowledge of IT infrastructure and services (Data Centers, physical and virtual servers, local and wide area networking components, cloud Infrastructure/Platform/Software as a Service, etc.).
• Knowledge of security policies such as NIST Special Publications, Security Technical Implementation Guides (STIGs), DOD Cloud Computing Security Resource Guide (SRG).
• Familiarity with NIST 800-171.
• Certified Information Systems Security Professional (CISSP) certification.
• Certificate of Cloud Security Knowledge (CCSK) certification.

Benefits

• Health savings account
• Paid holidays
• Health insurance
• Dental insurance
• Paid time off
• Vision insurance
• 401(k) matching
• Life insurance