General Dynamics - Quantico, VA

posted 3 months ago

Full-time - Mid Level
Quantico, VA
10,001+ employees
Transportation Equipment Manufacturing

About the position

As a Cyber Security Analyst at GDIT, you will play a crucial role in supporting the Department of Defense's mission by ensuring the security and compliance of systems within the Naval Criminal Investigative Service (NCIS). This position involves conducting vulnerability assessments, managing authorization packages, and utilizing various cybersecurity tools to protect sensitive information and systems. You will be part of a team that is dedicated to enhancing the security posture of the organization and ensuring compliance with Navy cybersecurity practices.

Responsibilities

  • Support all authorization package ACAS related tasks assigned to ISSEs and NQVs.
  • Perform 90 Day Baseline Scans for each Authorization package in accordance with Navy requirements.
  • Provide Detailed Vulnerability List (DVL) Reports for use in the eMASS record.
  • Conduct weekly and 'As Needed' ACAS scans in support of RMF STEP 3/STEP 4 processes.
  • Support continuous monitoring for authorized packages and report vulnerability status of all active Enterprise Security packages.
  • Create asset lists using provided hardware lists.
  • Perform risk analyses of computer systems and applications during all phases of the system development life cycle using the ACAS tool.
  • Initiate Enterprise Mission Assurance Support Service (eMASS) registrations and monitor RMF Assessment and Authorization (A&A) packages.

Requirements

  • Active Top Secret clearance with SCI Eligibility.
  • 5+ years of experience in the systems security discipline with specific emphasis on Navy Cybersecurity practices.
  • Must meet or exceed OPNAVINST 5239 requirements to be certified as a Navy Qualified Validator or must be certified within 6 months of start date.
  • Experience in the development of RMF Assessment and Authorization (A&A) Security Plans (SP).
  • Experience with System Level Continuous Monitoring (SLCM), Ports, Protocols and Services Management (PPSM), Host Based Security Systems (HBSS), and ACAS vulnerability scanning.
  • Experience with eMASS tools and maintaining RMF A&A packages.

Nice-to-haves

  • Completed Navy RMF training
  • Formal ACAS training
  • Formal eMASS training

Benefits

  • 401K with company match
  • Comprehensive health and wellness packages
  • Internal mobility team dedicated to helping you own your career
  • Professional growth opportunities including paid education and certifications
  • Paid vacation and holidays
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service