Information Security Analyst

$74,000 - $146,000/Yr

Sanmina - Huntsville, AL

Full-time - Mid Level

Onsite - Huntsville, AL

Computer and Electronic Product Manufacturing

About the position

The Information System Security Officer (ISSO) at Sanmina Corporation plays a critical role in supporting classified Information Systems (IS) within the Defense and Aerospace sector. This position involves ensuring compliance with the National Industrial Security Program (NISP) and working closely with various teams to implement security requirements for applications and systems. The ISSO will also mentor team members and contribute to the development of security documentation and processes, while maintaining compliance with DOD, NIST, and other regulatory requirements.

Responsibilities

• Support the Information System Security Manager (ISSM) in maintaining compliance with the National Industrial Security Program (NISP).
• Work with engineering and program development teams to provide security requirements for new applications and systems.
• Contribute to the design, documentation, and deployment of security technologies.
• Assist in the development of System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
• Document processes and procedures related to Cyber Security technologies.
• Maintain the Cyber Security Roadmap in collaboration with the ISSM.
• Perform architectural reviews and submissions to support program objectives.
• Mentor other team members on security technologies and standards.
• Manage and track security project tasks, including security controls development and implementation.
• Assist in the completion of the accreditation process and maintain the accredited status of closed areas.

Requirements

• Bachelor's degree in Information Systems, Computer Science, or a Cyber-related discipline.
• Minimum of 5 years of IT-related work experience in an ISSO position.
• DoD approved baseline IAM Level II related certifications (CAP, CASP+ CE, CISM, CISSP or Associate, GSLC, CCISO, or HCCISP).
• Familiarity with various host, network, and cloud-based security technologies.
• Experience with NIST SP 800 standards including 30, 53, 82, and 171.
• Experience with CNSSI 1253 and 1253F.
• Experience with DISA STIGs and SCAP compliance checker.
• Experience with DCSA certification authority's RMF accreditation process and the DCSA DAAPM.
• Excellent troubleshooting skills and administration of security configurations across multiple operating systems (Windows, Linux/Unix).
• Ability to work with all levels of an organization and maintain positive relationships.

Nice-to-haves

• Experience in a DOD Information Security contractor security environment.
• Familiarity with eMASS tools and maintaining POA&Ms, artifacts, and SSPs.
• Experience with security assessments and risk analysis including log auditing and vulnerability scanning.