Alutiiq Information Management, LLC a subsidiary of Alutiiq, LLC is seeking a Cyber Security Analyst II to join our team in San Diego, CA. This effort is being lead by Naval Information Warfare Command (NIWC) Pacific in support of the Digital Additive Manufacturing Environment (DAME) project. This material system will be the result of an integration effort to provide for 3D Print Exchange and Product Lifecycle Management (PLM) capabilities using networked systems worldwide that will ultimately provide for a Joint Service 3-D Printing capability to the Department of War (DoW).
Support NAVWAR, NIWC Pacific ISSM / CIO with RMF package development as technical ISSE.
Assemble all required documentation as outlined by the ISSM and CNIC/NAVFAC for the RMF packages.
Assess and implement security controls, Security Technical Implementation Guides (STIGs), and Assured Compliance Assessment Solution (ACAS) scans in accordance with governing policies for servers, networking equipment, workstations, etc.
Assist system administrators with implementation or application for all applicable Security Technical Implementation Guide (STIG), industry best security and design practices, and implement all applicable Information Assurance Vulnerability Alert (IAVA) security requirements.
Process, maintain compliance, and verify completion of Nessus, STIG, and SCAP files, report any open findings or vulnerabilities to the program, propose and implement mitigations as required and construct necessary POA&M when required.
Maintain compliance in Vulnerability Remediation Asset Manager (VRAM) and DoD Information Technology Portfolio Repository-Navy (DITPR-DON)/ DON Application and Database Management System (DADMS).
Understand NIST, Committee for National Security Systems (CNSS), DoD/DON Communications Task Orders (CTOs, TASKORDS), and Information Assurance Vulnerability Management (IAVMs).
Create system authorization boundary diagrams and data flow diagrams encompassing traceability back to Hardware, Firmware, Software, Ports, Protocols and Services (PPS) lists, and ACAS while complying with DISA/NAVFAC standards.
Review system PPS list and ensure compliance IAW Department of Defense Instruction (DoDI) 8551.01.
Interacts frequently with internal personnel and outside representatives at various levels.