Cyber Security Analyst II

Job Description:

Alutiiq Information Management, LLC a subsidiary of Alutiiq, LLC is seeking a Cyber Security Analyst II to join our team in San Diego, CA. This effort is being lead by Naval Information Warfare Command (NIWC) Pacific in support of the Digital Additive Manufacturing Environment (DAME) project.

This material system will be the result of an integration effort to provide for 3D Print Exchange and Product Lifecycle Management (PLM) capabilities using networked systems worldwide that will ultimately provide for a Joint Service 3-D Printing capability to the Department of War (DoW).

• Support NAVWAR, NIWC Pacific ISSM / CIO with RMF package development as technical ISSE.
• Assemble all required documentation as outlined by the ISSM and CNIC/NAVFAC for the RMF packages.
• Assess and implement security controls, Security Technical Implementation Guides (STIGs), and Assured Compliance Assessment Solution (ACAS) scans in accordance with governing policies for servers, networking equipment, workstations, etc.
• Assist system administrators with implementation or application for all applicable Security Technical Implementation Guide (STIG), industry best security and design practices, and implement all applicable Information Assurance Vulnerability Alert (IAVA) security requirements.
• Process, maintain compliance, and verify completion of Nessus, STIG, and SCAP files, report any open findings or vulnerabilities to the program, propose and implement mitigations as required and construct necessary POA&M when required.
• Maintain compliance in Vulnerability Remediation Asset Manager (VRAM) and DoD Information Technology Portfolio Repository-Navy (DITPR-DON)/ DON Application and Database Management System (DADMS).
• Understand NIST, Committee for National Security Systems (CNSS), DoD/DON Communications Task Orders (CTOs, TASKORDS), and Information Assurance Vulnerability Management (IAVMs).
• Create system authorization boundary diagrams and data flow diagrams encompassing traceability back to Hardware, Firmware, Software, Ports, Protocols and Services (PPS) lists, and ACAS while complying with DISA/NAVFAC standards.
• Review system PPS list and ensure compliance IAW Department of Defense Instruction (DoDI) 8551.01.
• Interacts frequently with internal personnel and outside representatives at various levels.

Payrate: $90,000 to $105,000 Annually

Job Requirements:

• BA/BS in Information Technology, Cyber Security, Computer Science, or related discipline.
• Minimum compliance with DoD Manual 8570.01M (or equivalent) Cyber Information Technology/Cybersecurity Workforce IAT Level II required, IAM Level III preferred.
• Must be a U.S. Citizen
• Must currently possess a Secret Security Clearance w/SSBI
• 2 – 4 years in Information Technology or Cyber Security environment supporting the Department of Defense
• Enterprise Mission Assurance Support Service (eMASS)
• Assured Compliance Assessment Solution (ACAS)
• Security Technical Implementation Guides (STIGs)
• DON Vulnerability Remediation Asset Manager (VRAM)

Proficiency in the following disciplines:

• Microsoft operating systems
• Microsoft SQL
• Red Hat Linux
• Cisco
• Aruba wireless
• MS Office
• MS Visio

Experience Preferred but not required:

• LENEL
• Milestone
• Ability to effectively communicate verbally and in writing
• Ability to excel in a fast paced program office environment
• Possess attention to detail
• Experience with developing Assessment and Authorization (A&A) documentation
• Experience with the Risk Management Framework (RMF) and NIST SP 800-53 rev 4 as an Information Systems Security Engineer (ISSE)
• Knowledge of US naval communication suites in areas such as LAN, WAN, and RF paths.
• Working knowledge of servers, software, networking equipment, and other infrastructure elements required
• Familiar with the DoD Information Technology Portfolio Repository-Navy (DITPR-DON)/DON Application and Database Management System (DADMS) and the requirements for their use
• Current Security+ certification