Position: Information Security Analyst (NQV)
Location: Norfolk Naval Shipyard 100% on-site
Clearance: Top Secret clearance
Job Description:
The Information Security Analyst (NQV) shall work to support DoD Risk Management Framework (RMF) and validate Network and System assets. They will be responsible to:
a.Follow Accreditation & Authorization (A&A) process and standards.
b.Perform System / network vulnerability analysis.
c.Conduct Risk assessment and risk mitigation analysis.
d.Perform Security Test and Evaluation (ST&E) processing.
e.Validate Security Technical Implementation Guide (STIG) Processing. Use automated STIG processing tools [e.g., Security Content Automation Protocol (SCAP), Evaluate STIG, STIGMAN, EMASSter]. Use of Enterprise Mission Assurance Support Services (eMASS) and similar RMF repositories.
f.Setup and execute A&A Business Rules, Standard Operating Procedures (SOP)s, Concept of Operations (CONOP)s, and Plans.
g.Perform Contingency planning, training and testing.
h.Establish/interrupt Firewall Policy.
i.Identify Interrupt, register Ports & Protocols.
j.Review Hardware / Software, network boundaries, flow diagrams and technical drawings.
k.Identify interrupting information in the system baseline configuration in VRAM by uploading vulnerability scan of a representative baseline system.
l.Advise on the proper method to mitigate vulnerabilities.
m.Produce executive documents, reports, project plans and plan of action and milestones (POA&M).
Qualifications:
Minimum of seven (7) years of experience in CS/A&A analysis support in IA controls analysis, conducting risk assessments, risk mitigation analysis, or developing plans. KSAs include:
• Qualified and registered as a Navy Qualified Validator (NQV)
• Expert knowledge of and experience with CS/RMF requirements as defined by Public Laws, National, DoD, and DON [e.g., Federal Information Security Management Act (FISMA), DoDD 8100.02, DODI 8500.01, DoDI 8520, DoDI 8530, DoDI 8531, SECNAV 5239 Series and OPNAV 5239 Series, NIST Special Publications Series 800, etc.]
• Expert and Mastery levels with institutional knowledge on the mission critical procedures, systems, and processes, as they pertain to Information Technology and Cyber Security requirements.
• Experience in certifying and accrediting DON information systems and networks, as well as Platform IT.
• Expert knowledge and experience with the requirements outlined in OPNAVINST N9210.3 Safeguarding Naval Nuclear Propulsion Information
Education:
Bachelor's degree in an IT related discipline OR Level II Certification (Security+ or better) AND a minimum of seven (7) years of experience.
Certifications:
• Active Security + CE or higher
• Active NQV
