Job DescriptionBAE Systems is seeking an Information Assurance / Cybersecurity Analyst to support our work as a prime contractor on a high-profile U.S. Navy weapon system. Accuracy, integrity, subject matter expertise, and the ability to work well independently and with others are important traits we expect the successful candidate to possess and demonstrate. This position is full-time on-site at Washington Navy Yard.
This position is responsible for providing Information Assurance, Cybersecurity, and Information Management to the Navy's Strategic Systems Program Command Information Officer (CIO).
As an onsite Information Assurance / Cybersecurity Analyst, you will assist in conducting internal audits of enterprise IT networks, systems, applications, and security tools to ensure they adhere to Navy and DoD security policies and procedures (e.g., STIGs, CTOs, IAVMs, FRAGOs, NTDs, etc.) and applicable frameworks and regulations (e.g., NIST,FISMA, etc.).
You will:
- Review DoD, DON cyber security alerts, notices, IAVMs, etc.
- Conduct risk assessments and discuss mitigation strategies when needed
- Review security and data/logs to respond to security incidents on SSP Enterprise systems
- Support the IAM/ISSM in developing Cybersecurity standards and policies
- Maintain the SSP Enterprise systems Assessment and Authorization (A&A) packages; topologies; ports, protocol, and services lists; contingency plans, disaster recovery procedures, incident response plans, and POA&Ms
- As a subject matter expert, you will provide technical guidance to the IAM/ISSM, CIO, Cybersecurity Workgroup (CSWG), Program Managers (PMs), Program Management Officers (PMOs), FBM Partners, etc. on cybersecurity matters and initiatives, including researching new technologies to counter evolving threats.
Required Skills and Education- Full-time on-site at Washington Navy Yard
- Bachelor's degree in Cyber Security, Information Systems, Computer Science, Mathematics or related field with at least 10 years of professional work-related experience; or 12 years of related professional work experience in lieu of a degree
- An IAT Level III and IAM Level II certification as specified in the DoD 8140.
- Or, have a SECNAV 5239 qualifying degree and obtain an IAT Level III and/or IAM II certificate as specified in the DoD 8140.
- Ability to obtain and maintain Common Access Card (CAC), badge access to the customer's
- Hands on working knowledge of Risk Management Framework.
- Experience preparing and reviewing RMF packages.
- Experience with information security configuration guides or DISA STIGs.
- At least three (3) years-experience supporting and/or maintaining information security technologies.
- Experience developing policies, procedures, and technical training materials.
- Proficiency
- discerning the protection needs (i.e., security controls) of information systems and networks
- evaluating test plans for applicability and completeness
- assessing security controls based on cybersecurity principles and tenets. (e.g., CNSSI No. 1253, NISTSP 800-53)
- performing impact/risk assessments
- interpreting vulnerability scanner results to identify vulnerabilities.
- Knowledge of
- cyber defense and vulnerability assessment tools and their capabilities
- vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
- and understanding of security technologies including vulnerability scanning (ACAS), firewalls, HBSS and data protection/encryption systems. OS/CE certification
- information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
- capabilities and applications of network equipment including routers, switches, bridges, servers, transmission media, and related hardware.
- business continuity and disaster recovery continuity of operations plans
- Ability managing client relationships, including determining client needs/requirements, managing client expectations, and demonstrating commitment to delivering quality results.
Preferred Skills and Education- Bachelor's degree in Cyber Security, Information Systems, Computer Science, Mathematics or related field with at least 6 years of professional work-related experience
