Information Security Analyst

Information Security Analyst
Location: San Diego, CA
Clearance Required: Active Department of Defense Secret Clearance
Compensation: $90,000 – $120,000 (based on experience)
Employment Type: Full-time, Hourly Exempt

The Information Security Analyst will monitor the security status of an organization’s computer systems and develop increased protection against intrusion as necessary.

Key Responsibilities

• Conduct research into the latest hacking strategies to anticipate and prevent future security breaches.
• Work closely with other members and with upper management to create and implement plans for the best disaster recovery system of protection and recovery possible
• Remain on call outside of normal working hours in the event of unexpected security demands

Required Qualifications

• Secret Security Clearance
• 5 years of experience working on cybersecurity and accreditation in DoD environment
• Certified Information Assurance Technical or Management Level II in accordance with DoD 8570.1 Working knowledge of Risk Management Framework (RMF)
• Recent experience testing and implementing cybersecurity controls to establish and maintain an Information System Authority to Operate (ATO) with NETWARCOM
• Experience with the Federal Information Security Management Act (FISMA) policy
• Recent experience performing annual cybersecurity reviews and documenting review results for DoD program
• Experience with all steps of RMF process preparing artifacts, documenting ATO progress in eMass, testing security controls and recording test results
• Experience working on ATO certification for the program hosted in Data Center; understanding the specifics of cybersecurity controls inheritance
• Familiar with FISMA and the relevant guidance issued by the National Institute of Standards and Technology (NIST) (i.e. SP 800-37, SP 800-26, SP 800-53, SP 800-53A, and SP 800-34) as well as Federal Information Processing Standards (FIPS) Publications
• Experience with mediation of security vulnerabilities within computer systems and experience using network vulnerability scan tools and the Defense Information Systems Agency Vulnerability Management System (VMS)
• Experience developing and reviewing System Security Plans, Security Categorization, Business Impact Analysis, Contingency Plans, Security Assessment Reports, Security Test and Evaluation Plans, Impact Assessments, Configuration Management Plans, and POA&M activities
• Experience with Microsoft Office Suite of Program tools. Knowledge of Authority to Operate certification process under RMF procedures and Software development process

C2 Essentials is an Equal Opportunity Employer.