Information Systems Solutions (ISS) is looking for an Information Security Analyst supporting Fort Rucker, AL.
This position is 100% onsite.
Specific duties include, but are not limited to the following:
• Responsible for maintaining the security posture of our program by conducting compliance checks and vulnerability scanning using the Assured Compliance Assessment Solution (ACAS)
• Requires a deep understanding of cybersecurity principles, risk management, and familiarity with various compliance frameworks
• Implement and manage the ACAS suite to conduct regular vulnerability scans across the programs' network infrastructure
• Analyze scan results, prioritize vulnerabilities based on risk, and report findings to relevant stakeholders
• Develop and maintain scanning policies and procedures to ensure comprehensive coverage of assets
• Work closely with IT and development teams to remediate identified vulnerabilities in a timely manner
• Ensure compliance with relevant cybersecurity frameworks, standards, and regulations (e.g., NIST)
• Assist in the development of System Security Plans (SSPs) and other documentation required for compliance purposes
• Collaborate with the compliance team to prepare for internal and external audits
• Provide technical guidance on security best practices and assist in security awareness training initiatives
• Stay current with emerging security threats, vulnerabilities, and controls
• Manage the Plan of Action and Milestones
• Prepare, review and update RMF documentation
• Participate in incident response activities as needed.
Requirements
Clearance Level
Secret clearance
Certifications (IAT Level II)
Security+ CE
And
CySA+ (required within 90 days of hire)
Required Skills
• At least 4 years of experience in cybersecurity or equivalent field.
• Bachelor's degree or equivalent experience.
• Knowledge and experience with automated tools such as Assured Compliance Assessment Solution (ACAS), Center for Internet Security (CIS) Benchmark, and Security Content Automation Protocol (SCAP), and Retina.
• Knowledge and experience of cybersecurity, A&A and RMF documentation development and support.
