System Security Analyst

Santa Rita, Guam

8 days ago

Job Description

Position Overview

The Systems Security Analyst / Information Systems Security Engineer (ISSE) provides cybersecurity engineering support to the Naval Facilities Engineering Systems Command (NAVFAC) Marianas Command Information Office (CIO). The role focuses on protecting the confidentiality, integrity, and availability of Facility-Related Control Systems (FRCS), networks, and data through the full Risk Management Framework (RMF) lifecycle, vulnerability management, continuous monitoring, policy development, and incident response.Personnel are considered Emergency Essential / Mission Essential and may be required to support the MAR Cyber Emergency Response Team (CERT) on-call rotation (with schedule flexing to stay within 40 hours/week).

Key Responsibilities

Drive end-to-end RMF lifecycle execution (Steps 1–6) in accordance with Department of the Navy (DoN) and NAVFAC Echelon II guidance; verify system inventories and artifacts for compliance, completeness, and quality; format and upload packages into eMASS.
Achieve, maintain, and track Authorities to Operate (ATOs) for FRCS; facilitate annual security reviews and draft/submit Memorandums for Record (MFRs) for baseline changes.
Develop, author, and maintain security policies, Standard Operating Procedures (SOPs), and implementation plans mapped to NIST SP 800-53 control families, tailored to the FRCS environment.
Develop and execute a comprehensive Vulnerability Management Strategy; perform vulnerability and compliance assessments using approved DoN tools (ACAS, SCAP, Evaluate STIG); complete manual STIG/SRG validations (.ckl/.cklb); generate Security Center and eMASSter reports; upload results to VRAM.
Sustain System-Level Continuous Monitoring (SLCM): conduct routine scans, audit log analysis, drive remediation/mitigation, and provide accurate quarterly Plan of Action and Milestones (POA&M) updates.
Deliver on-site validation and testing support for RMF Step 4, coordinating with system owners and independent validators.
Serve as technical representative / Configuration Management (CM) Officer on the Configuration Control Board (CCB); provide security impact analyses and risk assessments for proposed FRCS baseline changes.
Execute incident response operations as a member of the MAR CERT, including participation in on-call rotations.
Prioritize and coordinate technical support across FRCS environments; deliver bi-weekly RMF status reports to the ISSM and maintain project status records in Maximo and/or eProjects; prepare Monthly Status Reports (MSRs).

Required Qualifications

U.S. Citizenship.
Active Top Secret security clearance.
DoDM 8140.03 foundational qualification for Work Role 461 (Systems Security Analyst) at Intermediate (or Advanced) proficiency level.
- Intermediate-level certifications (one required): CCSP, Cloud+, GICSP, GISF, GSEC, or Security+.
- Advanced-level certifications also accepted (e.g., CISSP, CySA+, etc.).
Minimum of 5 years of RMF experience and 1 year of specialized experience with Facility-Related Control Systems (FRCS) performing RMF and cybersecurity engineering tasks (strongly preferred).
Demonstrated ability to work independently with minimal supervision.
Excellent written and verbal communication skills in English; proven ability to author technical reports, security policies, and procedures and interface effectively with system owners, ISSMs, and other government personnel.
Physical capability to perform the duties, including prolonged standing/walking over uneven surfaces, bending, climbing ladders, and lifting IT equipment up to 25 lbs.
Maintain certification currency and complete required Continuous Professional Development (CPD) hours annually.

Preferred / Highly Desired

Prior experience supporting NAVFAC, DoN, or DoD FRCS environments.
Hands-on experience with eMASS, ACAS/Nessus, VRAM, Security Center, STIG Viewer, and Maximo/eProjects.
Familiarity with NAVFAC Echelon II RMF Business Rules.

About GBTI

GBTI Solutions, Inc.(GBTI) is revolutionizing how IT works, leveraging innovative and cutting edge technology to deliver time efficient, high-quality, and cost- effective business solutions to government, commercial, and non-profit clients across three continents. Since our founding in 2005, we have delivered customized solutions designed to meet each client's needs and requirements. Our innovative products, GEMS and ION each offer new insight on Human Resources and Physical Assets. GBTI works to truly understand these needs so that we can effectively solve their technical and business challenges while providing added value through a comprehensive solution approach. We deliver our solutions and products through four core practices centered upon Software Development, Data Management, Intelligent Transformation, and Research & Development (R&D): Currently, the GBTI Innovation Lab is working with leading edge technologies like Artificial Intelligence, Machine Learning, Rapid Acquisition and Blockchain for research and development.

Mission Statement
GBTI is revolutionizing how IT works, leveraging innovative and cutting edge technology to deliver time efficient, high- quality, and cost-effective business solutions.

To achieve this mission, GBTI has adopted the following core values:

Quality – Everything we do must meet high and measurable quality standards and applicable requirements.
Responsiveness – We must listen to our clients and respond quickly to their specific and changing needs. We must respond to problems very quickly and provide timely solutions.
Care – We must care about our clients. We must care about our people. We must care about each other. We must care about the company that carries our people's dreams.
Growth – We must help our clients, our people and our company to continually grow in value and capability.
Fun – We must create a working environment such that clients have fun to work with us and our people have fun to work with each other.
Improvement – We must monitor, measure, analyze, and evaluation our operations and performance continuously to achieve continual improvement of our operations and performance

As any company, GBTI often faces challenging situations and must make critical decisions. This set of core values are our guiding principles in making tough choices. This set of core values are also the foundation for our business strategy, our recruitment process, our solution methods, our management approaches, and our relationships with our clients and with our people.

Numbers & Facts

Location	Santa Rita, Guam
Website	https://www.gbtisolutions.com

Skills

Analysis Skillsunmatched
Artificial Intelligence (AI)unmatched
Blockchainunmatched
Business Solutionsunmatched
Business Strategyunmatched
CCSP - Cisco Certified Security Professionalunmatched
CISSP - Certified Information Systems Security Professionalunmatched
Change Controlunmatched
Cloud Computingunmatched
Communication Skillsunmatched
CompTIA Security+unmatched
Computer Securityunmatched
Configuration Managementunmatched
Continuous Improvementunmatched
Control Systemsunmatched
Customer Relationsunmatched
Data Managementunmatched
Emergency Responseunmatched
English Languageunmatched
Establish Prioritiesunmatched
GISF - GIAC Information Security Fundamentalsunmatched
GSEC - GIAC Security Essentials Certificationunmatched
Governmentunmatched
Human Resourcesunmatched
IBM Maximo Asset Managementunmatched
Incident Responseunmatched
Information Systems Security Engineering (ISSE)unmatched
Internet Securityunmatched
Leading Edge Technologyunmatched
Lift/Move 25 Poundsunmatched
Lifting Equipmentunmatched
Machine Learningunmatched
Management Strategyunmatched
Naval Facilities Engineering Command (NAVFAC)unmatched
Needs Assessmentunmatched
Nessusunmatched
Nonprofitunmatched
On Callunmatched
Operational Auditunmatched
Operational Improvementunmatched
Policy Developmentunmatched
Presentation/Verbal Skillsunmatched
Record Keepingunmatched
Reporting Skillsunmatched
Research & Development (R&D)unmatched
Risk Analysisunmatched
Risk Management Framework (RMF)unmatched
Security Analysisunmatched
Software Developmentunmatched
Standard Operating Procedures (SOP)unmatched
Status Reportsunmatched
Systems Analysisunmatched
Systems Maintenanceunmatched
Technical Deliveryunmatched
Technical Leadershipunmatched
Technical Supportunmatched
Time Managementunmatched
U.S. National Institute of Standards and Technology (NIST)unmatched
United States Citizenunmatched
United States Department of Defense (DoD)unmatched
VRAMunmatched
Validation Testingunmatched
Writing Skillsunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Free resume builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Free resume builder

System Security Analyst

Job Description

About GBTI

Numbers & Facts

Skills

Be found by employers

Level up your application

Professional resume templates

Free resume builder