Cybersecurity Analyst

Full-time - Mid Level

West Mifflin, PA

Professional, Scientific, and Technical Services

About the position

We are searching for a Cybersecurity Analyst to join our team in West Mifflin, PA or West Milton, NY. There are two positions available, both primarily on-site work with the possibility of hybrid schedule. The Cybersecurity Analyst will be responsible for execution of all aspects of the National Institute of Standards and Technology (NIST) directives to support the Risk Management Framework (RMF). This includes assisting information system owners with the development of System Security Plans (SSPs) and Security Assessment Reports (SARs) using the existing RSA Archer application on the Naval Nuclear Propulsion Network (NNPP Net) to support information system authorization. Additionally, the subcontractor will assist in the development of Plans of Action and Milestone (POA&Ms) and Risk Based Decisions (RBDs) for deficiencies found during the information system authorization process.

Responsibilities

• Execution of all aspects of the NIST directives to support the Risk Management Framework (RMF)
• Assist information system owners with the development of System Security Plans (SSPs)
• Develop Security Assessment Reports (SARs) using the RSA Archer application
• Support information system authorization on the Naval Nuclear Propulsion Network (NNPP Net)
• Assist in the development of Plans of Action and Milestone (POA&Ms)
• Assist in the development of Risk Based Decisions (RBDs) for deficiencies found during the information system authorization process

Requirements

• At least four years of combined experience in security control validator, security control assessor, Information Security Officer (ISSO), or Information System Security Manager (ISSM)
• At least two years of experience supporting development of information system security authorization packages in accordance with Risk Management Framework (NIST 800-37, 800-53, 800-53a)
• At least two years of experience working with Federal Risk and Authorization Program (FedRAMP)
• Security+ Certification

Nice-to-haves

• Experience with the RSA Archer application
• At least two years of experience working on IT security project teams
• At least one year of experience managing IT projects
• Knowledge of IT infrastructure and services (Data Centers, physical and virtual servers, local and wide area networking components, cloud Infrastructure/Platform/Software as a Service, etc.)
• Knowledge of security policies such as NIST Special Publications, Security Technical Implementation Guides (STIGs), DOD Cloud Computing Security Resource Guide (SRG)
• Knowledge of infrastructure security, endpoint protection, vulnerability management tools
• Previous work authorizing information systems within a classified DoE or DoD environment
• Familiarity with NIST 800-171
• Certified Information Systems Security Professional (CISSP) certification
• Certificate of Cloud Security Knowledge (CCSK) certification

Benefits

• Medical Insurance - 100% company paid premiums for employees
• Dental and Vision Insurance
• 401k plan with company match
• Paid time off 24 hours of paid community service a year!
• Up to 4 weeks paid time off a year
• 10 paid floating holidays
• Life insurance, short- and long-term disability
• Employee Assistance Program (EAP)
• Professional development opportunities