Senior Cybersecurity Analyst P/T

ASGN - Suffolk, VA

Part-time - Mid Level

Suffolk, VA

Administrative and Support Services

About the position

We are currently seeking a part-time Senior Cybersecurity Analyst (CSA) or Information Systems Security Engineer (ISSE) to join our team in Suffolk, VA. This position requires a TS/SCI clearance and is focused on Risk Management Framework (RMF) expertise. The Senior CSA will work approximately 20 hours per week and must be local to the Tidewater region. The role involves planning and implementing safety measures by collecting information about security incidents and their outcomes. The candidate should have a solid understanding of various tactical radios, including AN/PRC-117G, AN/ARC-210, and AN/USC-61 systems, particularly with Mobile User Objective System (MUOS) software changes and over-the-air testing of ground systems. In this role, you will be responsible for processing RMF Authorization and Assessment (A&A) packages related to various MUOS ground systems that are Authorized To Connect (ATC). You will review and assess system security requirements and associated verification methods in accordance with RMF standards. Additionally, you will support security planning, assessment, risk analysis, and risk management using the RMF. Continuous monitoring steps for authorized systems will be executed to ensure that security controls are adequately maintained, and system users adhere to established policies. You will also provide recommendations for system-level solutions to resolve security requirements and support the Government in enforcing trusted relationships among external systems and architectures. Knowledge of signal quality through the use of circuit and systems from end-to-end performance tests is also essential. Some travel may be required for this position.

Responsibilities

• Plan and implement safety measures by collecting information about security incidents and outcomes.
• Understand various tactical radios AN/PRC-117G, AN/ARC-210, and AN/USC-61 systems with MUOS software changes and over-the-air testing of ground systems.
• Process RMF A&A packages related to various MUOS ground systems Authorized To Connect (ATC).
• Review and assess system security requirements and associated verification methods per RMF standards.
• Support security planning, assessment, risk analysis, and risk management using the Risk Management Framework (RMF).
• Execute continuous monitoring steps for authorized systems to ensure that security controls are adequately maintained and system users adhere to policies.
• Provide security planning, assessment, risk analysis, and risk management.
• Recommend system-level solutions to resolve security requirements.
• Support the Government in enforcing trusted relationships among external systems and architectures.
• Knowledge of signal quality through the use of circuit and systems from end-to-end performance tests.

Requirements

• Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university.
• Minimum five (5) years experience in IT with a focus in RMF and A&A package development experience, preferably working as an ISSE or in a similar information system security role.
• Active Top Secret/SCI clearance.
• Experience with the Risk Management Framework (RMF) and NIST SP 800-53 rev 4 as an Information Systems Security Engineer (ISSE).
• Experience working in a DoD environment structure and system acquisition.
• Assist in developing schedules and Plans of Actions and Milestones (POA&M) for producing deliverable products and reports within customer-directed timelines.
• Full understanding of Navy RF of various systems and ability to coordinate and support RF related projects from beginning to end until ATO is approved.
• Possess one of the following from the DoD 8570 IAT Level II/CSWF Designation code 611 Advanced: Military training: NEC 741A Information Systems Security Manager OR working knowledge of DODD 8500.1, DODI 8500.2, DODI 8510.01, NIST SP 800-37, NIST SP 800-53, and other Cybersecurity guidance.
• CASP, CISM or CISA certification.

Benefits

• Quality career resources
• Training and certifications
• Development opportunities
• Comprehensive benefits package