Information Security Analyst

The Information Security Analyst shall work to support the cybersecurity posture by performing the DoW Risk Management Framework (RMF) process across Network and System assets. They will be responsible to:

• Apply Cybersecurity / INFOSEC concepts and requirements.
• Perform System / Network vulnerability analysis.
• Perform Risk assessment and risk mitigation analysis.
• Support Security Test and Evaluation (ST&E).
• Participate in contingency planning, Firewall Policies, and Ports and Protocols checks.
• Maintain all day-to-day Vulnerability Remediation Asset Management (VRAM) activities.
• Enter the system baseline configuration in VRAM by uploading vulnerability scan of a representative baseline system.

• Minimum of four (4) years of experience in CS analysis in support of Cyber metrics analysis, incident response and mitigation; risk mitigation analysis, developing contingency plans. KSAs include:
• Experience with Cyber applications, [e.g., ACAS, HBSS, MDE, MDI, Splunk]
• Expert and Mastery levels with institutional knowledge and a minimum of 4 years’ experience, on the mission critical procedures, systems, and processes, as they pertain to Information Technology and Cyber Security requirements.
• Expert knowledge of and experience with CS requirements as defined by Public Laws, National, DoD, and DON guidance [e.g., Federal Information Security Management Act (FISMA), DoDD 8100.02, DODI 8500.01, DoDI 8520, DoDI 8530, DoDI 8531, SECNAV 5239 Series and OPNAV 5239 Series, NIST Special Publications Series 800, etc.]
• Expert knowledge and experience with the requirements outlined in OPNAVINST N9210.3 Safeguarding Naval Nuclear Propulsion Information.

Education:

• Bachelor’s degree in an IT related discipline OR Level II Certification (Security+ or higher) AND a minimum of four (4) years of experience.

Certifications:

• Active Security + CE or higher