Job Description
Position: Information Security Analyst (NQV)
Location: Norfolk Naval Shipyard 100% on-site
Clearance: Top Secret clearance
Job Description:
The Information Security Analyst (NQV) shall work to support DoD Risk Management Framework (RMF) and validate Network and System assets. They will be responsible to:
a. Follow Accreditation & Authorization (A&A) process and standards.
b. Perform System / network vulnerability analysis.
c. Conduct Risk assessment and risk mitigation analysis.
d. Perform Security Test and Evaluation (ST&E) processing.
e. Validate Security Technical Implementation Guide (STIG) Processing. Use automated STIG processing tools [e.g., Security Content Automation Protocol (SCAP), Evaluate STIG, STIGMAN, EMASSter]. Use of Enterprise Mission Assurance Support Services (eMASS) and similar RMF repositories.
f. Setup and execute A&A Business Rules, Standard Operating Procedures (SOP)s, Concept of Operations (CONOP)s, and Plans.
g. Perform Contingency planning, training and testing.
h. Establish/interrupt Firewall Policy.
i. Identify Interrupt, register Ports & Protocols.
j. Review Hardware / Software, network boundaries, flow diagrams and technical drawings.
k. Identify interrupting information in the system baseline configuration in VRAM by uploading vulnerability scan of a representative baseline system.
l. Advise on the proper method to mitigate vulnerabilities.
m. Produce executive documents, reports, project plans and plan of action and milestones (POA&M).
Qualifications:
Minimum of seven (7) years of experience in CS/A&A analysis support in IA controls analysis, conducting risk assessments, risk mitigation analysis, or developing plans. KSAs include:
• Qualified and registered as a Navy Qualified Validator (NQV)
• Expert knowledge of and experience with CS/RMF requirements as defined by Public Laws, National, DoD, and DON [e.g., Federal Information Security Management Act (FISMA), DoDD 8100.02, DODI 8500.01, DoDI 8520, DoDI 8530, DoDI 8531, SECNAV 5239 Series and OPNAV 5239 Series, NIST Special Publications Series 800, etc.]
• Expert and Mastery levels with institutional knowledge on the mission critical procedures, systems, and processes, as they pertain to Information Technology and Cyber Security requirements.
• Experience in certifying and accrediting DON information systems and networks, as well as Platform IT.
• Expert knowledge and experience with the requirements outlined in OPNAVINST N9210.3 Safeguarding Naval Nuclear Propulsion Information
Education:
Bachelor's degree in an IT related discipline OR Level II Certification (Security+ or better) AND a minimum of seven (7) years of experience.
Certifications:
• Active Security + CE or higher
• Active NQV
Numbers & Facts
| Location | Portsmouth, VA |
| Industry | Telecommunications Services |
| Salary | $100,000–$105,000 |
| Company Size | 100 to 499 employees |
| Year Founded | 2011 |
| Website | http://www.prosoft-eng.com |
About Company
We have an uncompromising commitment to providing our customers with quality technical products and services, while meeting high moral and ethical standards in the performance of our jobs. True Quality Assurance is the result of management commitment, dedication, and hard work throughout every level of our organization. Quality is an integral part of our operations and is evident in every aspect of our business, and PROSOFT enjoys an exceptional record of corporate performance.
The objective of PROSOFT's Quality Policy is to exceed the needs and expectations of our customers by providing highly skilled professionals. We attribute our success to our best-in-class personnel supported by a corporate culture that endorses the continual training, education, and empowerment of our employees in the delivery of quality technical products and services. Our active, company-wide Quality Management System provides an environment to establish, communicate, and review the quality objectives that enable us to continually cultivate success. PROSOFT and our employees commit to continuously improve the processes by which we provide our services and products, so that our work meets requirements, and is done right the first time.
Skills
- Analysis Skillsunmatched
- Automationunmatched
- Code Reviewsunmatched
- CompTIA Security+unmatched
- Computer Securityunmatched
- Concept of Operations (CONOPS)unmatched
- Contingency Plansunmatched
- Customer Support/Serviceunmatched
- Director of Nursing (DON)unmatched
- FISMA - Federal Information Security Management Actunmatched
- Firewallsunmatched
- Information Technology & Information Systemsunmatched
- Information/Data Security (InfoSec)unmatched
- Internet Securityunmatched
- Network Performance/Analysisunmatched
- Network Securityunmatched
- Network Systemsunmatched
- Project Planningunmatched
- Propulsionunmatched
- Publicationsunmatched
- Requirements Managementunmatched
- Risk Analysisunmatched
- Risk Managementunmatched
- Risk Management Framework (RMF)unmatched
- Security Analysisunmatched
- Security Protocolsunmatched
- Standard Operating Procedures (SOP)unmatched
- System Validationunmatched
- Systems Administration/Managementunmatched
- Technical Drawingunmatched
- Testingunmatched
- U.S. National Institute of Standards and Technology (NIST)unmatched
- United States Department of Defense (DoD)unmatched
- VRAMunmatched
- Vulnerability Scannersunmatched
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesFree resume builder
Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Free resume builder