Cybersecurity Analyst (Assessment and Authorization)

$80,000 - $90,000/Yr

Btas - Colorado Springs, CO

Full-time

Colorado Springs, CO

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Analyst (Assessment and Authorization) position at BTAS involves supporting the United States Space Force at Peterson AFB, Colorado. The role focuses on maintaining a strong cybersecurity posture through the development and management of security policies, procedures, and compliance documentation. The analyst will work closely with the Information System Security Manager and Information System Owner to ensure adherence to cybersecurity standards and regulations, particularly in relation to Risk Management Framework (RMF) processes.

Responsibilities

• Build, maintain, and track system's cybersecurity baselines via eMASS or equivalent.
• Review, assess, create, and update enclave documentation in eMASS for ISSM review and approval.
• Identify, collect, review, and maintain RMF required artifacts.
• Ensure accurate system documentation and configuration logs are maintained.
• Provide written evaluations portraying system progress on RMF compliance quarterly.
• Maintain cybersecurity data for systems registered in the ITIPS.
• Conduct and report annual FISMA security reviews and validate cybersecurity control compliance.
• Conduct annual control validations for NC3 and non-NC3 systems.
• Create and maintain mission common control packages and serve as the common control provider.
• Create and maintain Authority-to-Connect guest system packages in eMASS.
• Ensure required Cybersecurity functional activities are conducted during the systems' O&S phase.
• Participate in and lead system's IPTs and sustainment contractor meetings.
• Evaluate system's sources of changes and determine security impacts.
• Review and provide inputs to modification packages and program/system documents.
• Review system's test plans and test results and document findings.
• Perform security impact analysis on any system change and prepare necessary letters.
• Monitor and adhere to the system's A&A schedule deadlines.
• Review annually and provide recommended updates to program cybersecurity policies.
• Review and provide advice on RMF related agreements for compliance.
• Assist with the cybersecurity vulnerability management plan and risk assessment capability.
• Receive and review ACAS and SCC reports quarterly and characterize risk.

Requirements

• Active DoD Secret clearance.
• IAT or IAM Level 2 Certification (per DoD 8570.01M).
• Experience with DoD RMF functions and processes and/or DISA IASE.
• High School diploma PLUS 6+ years of experience, including 2+ years of experience performing IAT level 2 or IAM level 2 functions.

Nice-to-haves

• Experience with Xacta.
• Experience with FISMA, eMASS and/or ITIPS.
• Bachelor's degree.
• Active DoD TS/SCI clearance.

Benefits

• 401(k) matching
• Health insurance
• Paid holidays
• Paid time off