Information Security Analyst w/DevSecOps

Role: Information Security Analyst w/DevSecOps
Location: US-CA-Point Mugu
Salary Range: $110,000.00 USD to $140,000.00 USD

Overview:

Seeking an Information Security Analyst with 3+ years of experience, to support the implementation, maintenance, and continuous improvement of cybersecurity practices across assigned information systems and environments at Naval Base Ventura Point Mugu, CA. This position executes security protocols and procedures, monitors compliance with established security requirements, conducts assessments and audits, supports accreditation activities, and provides technical guidance on security tools and controls. Opportunities for career advancement, excellent benefits and long-term stability are some of the advantages of our growing, employee-focused company.

Responsibilities:

• Between 3 and 10 years of practical CEAT computer security experience in secure network and system design, analysis, procedure/test generation, test execution and implementation of computer/network security mechanisms

CYBER:

• Works closely with the Information Systems Security Manager (ISSM), Cybersecurity Lead, system owners, and functional support/technical teams to protect computer networks, information systems, digital files, and critical electronic infrastructure
• Implements and monitors security controls, protocols, and procedures
• Protects networks, systems, information, and critical infrastructure
• Conducts vulnerability assessments, audits, risk reviews and rapid response reporting and data calls
• Monitors for and respond to security incidents, breaches, and malware in coordination with the ISSM and/or Cybersecurity Lead
• Prepares and maintains accreditation and compliance documentation
• Supports the implementation and use of security tools
• Provides security training and recommend improvements to security processes and controls

DevSecOps:

• Integrates security into a continuous integration, continuous delivery, and continuous deployment pipeline to minimize vulnerabilities in software code
• Ensures the entire DevOps team, including developers and operations teams, share responsibility for following security best practices
• Enables automated security checks at each stage of software delivery by integrating security controls, tools, and processes into the DevOps workflow
• Assists in the continuous integration, continuous delivery/deployment (CI/CD), continuous feedback, and continuous operations cycle

Qualifications:

• IAT/IAM II as per DoD Manual 8140; Certifications: Security+, CISSP, or NSA equivalent
• Experience working with the Risk Management Framework processes
• Strong DEVSECOPS (proficient with Linux is a plus)
• Excellent communication and interpersonal skills-verbal, non-verbal, written, and listening for staff, customer, and organizational level communications, both formal and informal
• Ability to work independently, self-starter
• Working knowledge and use of Microsoft Office suite programs, MS Word, Excel, Access, and PowerPoint

EDUCATION:

Degree: BS or BA degree in Computer Information Systems or a relevant technical discipline

Allowable Substitution: An additional 6 years of relevant work experience may be substituted for a Bachelor's Degree, or 4 additional years of work experience with a relevant Associate's Degree

CLEARANCE:

Condition of Employment: Must have a T5 background investigation, active Top Secret Security Clearance, and be able to maintain a DoD Top Secret Security Clearance. Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information.

CITIZENSHIP:

The applicant must have US citizenship at the time of application.