Information Security Analyst (Senior) CSIA

Amentum - Aberdeen Proving Ground, MD

Full-time - Senior

Aberdeen Proving Ground, MD

Professional, Scientific, and Technical Services

About the position

Amentum is seeking several Senior Information Security Analysts to support the Cyber Security & Information Assurance (CSIA) Support Services office at Aberdeen Proving Grounds, MD, and Ft Belvoir, VA. This project aims to provide comprehensive services to the U.S. Army Combat Capabilities Development Command (DEVCOM), specifically within the Command, Control, Computers, Communications, Cyber, Intelligence, Surveillance, and Research (C5ISR) Center. The role involves delivering programmatic and business management services, engineering support, field engineering, laboratory services, logistics, and acquisition/administrative support to enhance the capabilities of CSIA's core Government personnel. The selected candidates will work closely with Government project leads to ensure the successful execution of these services. The Senior Information Security Analyst will be responsible for safeguarding the company's information and data against various threats. This includes creating and implementing security policies and protocols, monitoring networks for suspicious activities, and responding to security breaches. The analyst will assess information risk and facilitate the remediation of identified vulnerabilities across the enterprise. Additionally, the role involves presenting security information to the workforce and management, compiling management reports, and conducting detailed presentations to describe risk, controls, and maturity assessments. The analyst will also manage and maintain a Security Information and Event Management (SIEM) system and a Threat and Incident Response Program. Collaboration with other functions, such as Legal and Compliance, is essential to coordinate control requirements and reporting. The analyst will contribute to developing business-specific risk and compliance reporting, coordinate research initiatives on industry trends, and assist with demand management responsibilities of security consulting teams. Furthermore, the role includes defining and maintaining Information Security aspects of Governance, Risk, and Compliance (GRC) tools and processes, managing security incidents, and performing investigations and reporting as needed. Other duties may be assigned as required.

Responsibilities

• Ensure the safety of the company's information and data from threats.
• Create and implement security policies and protocols.
• Monitor networks for suspicious activities and respond to security breaches.
• Assess information risk and facilitate remediation of identified vulnerabilities.
• Present information security information to workforce and management.
• Compile management reports and detailed presentations on risk, controls, and maturity assessments.
• Manage and maintain a SIEM and Threat and Incident Response Program.
• Contribute to developing business-specific risk and compliance reporting.
• Coordinate research initiatives on industry, technology, and information security trends.
• Assist with demand management responsibilities of security consulting teams.
• Define and maintain Information Security aspects of GRC tool and process requirements.
• Manage security incidents, investigations, and reporting.

Requirements

• Bachelor's Degree in Computer Science, Information Systems, Engineering, Business or related field.
• Minimum of 10 years of working experience in information assurance, information security, or cyber security.
• Experience supporting an NSA approved Cross Domain Solution (CDS) Lab Based Security Assessment (LBSA) team.
• Minimum of 5 years of experience in cross domain solutions (CDS), including working on CDS research and development teams.
• Strong understanding of Linux.
• Knowledge of NSA certification and authorization processes for cryptographic systems and CDS.
• Evidence of experience with CDS Raise the Bar (RTB) requirements and third-party confirmation from NSA.
• Professionally recognized cybersecurity certification in a DoD Directive 8140.
• Minimum IAT Level II, IAM Level I, or IASAE Level I for the 3 CDS job categories.
• Active TOP SECRET US Government Clearance.

Nice-to-haves

• Background in working for or supporting the NSA.
• Demonstrated ability in Microsoft systems (Word, Excel, PowerPoint).
• Past experience working in C5ISR and CSIA.